NIS2 deadlines
Directive in force, real fines, but policies and remediation still to be defined.
SMEs
NIS2, security and AI governance for SMEs.
Companies of 10 to 250 employees, with a focus on the Italian market, that need to comply with NIS2, GDPR and the EU AI Act without an in-house SOC. noze offers affordable platforms and ongoing support.
Your challenges
Visibility on assets
Incomplete IT inventory, vulnerabilities discovered only after an incident.
AI without guardrails
Departments using cloud LLMs without policies or traceability.
Limited budget and people
No in-house CISO, no dedicated DPO, no red team.
How we can help
Product
Product
Product
Solution
Solution
Solution
ProductCyberAgent
Vulnerability assessment and automated pentest, monthly subscription.
ProductDataGovern
NIS2 / GDPR / AI Act in one on-premise platform.
ProductAdmina Enterprise
Open AI governance with Admina Enterprise: NIS2 and AI Act without lock-in.
SolutionCybersecurity
CISO-as-a-service consulting to define posture and roadmap.
SolutionArtificial Intelligence
AI strategy, governance and responsible adoption for SMEs.
SolutionCloud & Web Apps
Cloud-native architectures, web apps and scalable microservices.
Insights
Agent harness and sandbox: TrueForge and smolvm
TrueForge is an open-source harness in TypeScript holding the execution loop, MCP tools, approvals and secrets. smolvm is a Rust CLI booting microVMs with a separate guest kernel on libkrun, with an egress allowlist in the configuration file. Underneath sit five different isolation levels, from a syscall filter to a VM, and each stops different things.
GLM-5.3: new post-training and cyber benchmarks
Z.ai announced GLM-5.3 on 14 August, stating it starts from the same base model as GLM-5.2 and that every gain comes from post-training. The weights are not out yet. On CyberGym and ExploitGym the benchmarks measure something other than finding a vulnerability, and the CyberGym paper reports 759 raw crashes for 9 confirmed zero-days after manual triage.
Zero-knowledge proofs over inference: the Attestable launch and the published numbers
Attestable announces a $20M seed and writes that practical zero-knowledge proofs were considered impossible and that the company solved it. The technical post declares two temporary limitations, a 16K token window and integer quantisation of matrix multiplications, and labels the benchmarks alpha results on a single H100. IACR ePrint 2025/535, a preprint with no experimental setup described and no peer review, states 150 seconds per token on one core for Llama-3 8B.
Frequently asked questions
How can an SME comply with NIS2 without an in-house SOC?
noze pairs CyberAgent's vulnerability assessment and automated pentest, on a monthly subscription, with DataGovern to handle NIS2, GDPR and the AI Act in one on-premise platform. CISO-as-a-service consulting sets posture and roadmap without hiring an internal security team.
How much does it cost to secure an SME?
CyberAgent is built for an SME budget: vulnerability assessment and pentest are delivered as a monthly subscription, with no need to build an internal red team. noze's platforms are affordable and come with ongoing support, so spending stays predictable and security does not depend on a single incident.
Can SMEs use generative AI and stay compliant with the AI Act?
With Admina Enterprise, SMEs adopt open AI governance that covers NIS2 and the AI Act without lock-in, bringing policies and traceability to how departments use LLMs. noze's AI strategy guides responsible adoption without giving up generative tools.