Cybersecurity, with a human edge
Senior cybersecurity experts and a 24/7 SOC for organizations that need to take security seriously
We respond to most inquiries within one business day.
Trusted by
How we help
Advisory, offensive security, training, and detection & response. Four services, one team, a complete cybersecurity programme instead of a stack of disconnected tools.
vCISO, DPO, risk management, BCP/DR, GDPR, NIS2, DORA and ISO 27001 readiness. Iceland's top InfoSec consultants, embedded in your programme.
Penetration testing, red and purple teaming, social engineering, and physical intrusion tests by people who build their own tools.
Security developer training, system admin training, executive and staff awareness, NIS2 and DORA training, and the Awergo platform.
24/7 SOC, threat intelligence, dark web and external attack surface monitoring, incident response and digital forensics. Average 2m15s response, 20m to resolution in 2025.
Syndis in numbers
Owned outcomes, named experts, measurable response.
Customers
Avg SOC response time
Avg SOC resolution
Incidents handled off-hours
Why Syndis
Most cybersecurity firms sell products. We sell people. Senior experts who name themselves, take responsibility, and explain things clearly.
We build our own tools and methodologies. We don't resell a vendor stack. The same people who run our SOC also write our red team payloads.
Advisory, offensive testing, training, and 24/7 detection and response under one roof. One contract, one accountable team.
2m15s average response time. 20m average resolution. Published, not promised.
Banks, energy, transportation, telecom, and parliament rely on us. We hold a 13-year track record in regulated environments.
Iceland's top InfoSec consultants, named on the about page. Not a juniorised global SOC pool.
Insights
Responsible Disclosure Disclaimer: Syndis delayed the publication of these results until all identified parties had been notified of the situation and given a chance to remediate. What Companies in th
Financial entities follow DORA. Most other medium and large organisations in critical sectors follow NIS2. Some follow both. Here is how to tell which applies to you, and what changes when it does.
Most of us can probably agree that organizations of all sizes and industries have these things in common: Stale service accounts, old API keys, and other non-human identities that are running in their
Questions, answered
Yes. We operate globally, with 400+ customers and €10M+ revenue. Our Stockholm office covers Nordic and EU clients directly.
Yes. 2m15s average response time and 20m average resolution in 2025. 44% of incidents were handled outside business hours. We publish the numbers.
NIS2, DORA, ISO 27001, SOC 2, PCI DSS, and GDPR. We handle gap analysis, internal audits, and act as your virtual CISO if needed.
Global MSSPs run juniorised analyst pools and standardised playbooks. We use senior named experts, build our own tools, and tailor every engagement. You'll know who is on the keyboard during an incident.
Pricing is bespoke, based on scope and risk profile. Most engagements start with a discovery call and a scoped proposal.
Reykjavík and Stockholm. 13 years of building Nordic cybersecurity. 400+ customers.
