NIS2 deadlines
Directive in force, real fines, but policies and remediation still to be defined.
SMEs
NIS2, security and AI governance for SMEs.
Companies of 10 to 250 employees, with a focus on the Italian market, that need to comply with NIS2, GDPR and the EU AI Act without an in-house SOC. noze offers affordable platforms and ongoing support.
Your challenges
Visibility on assets
Incomplete IT inventory, vulnerabilities discovered only after an incident.
AI without guardrails
Departments using cloud LLMs without policies or traceability.
Limited budget and people
No in-house CISO, no dedicated DPO, no red team.
How we can help
Product
Product
Product
Solution
Solution
Solution
ProductCyberAgent
Vulnerability assessment and automated pentest, monthly subscription.
ProductDataGovern
NIS2 / GDPR / AI Act in one on-premise platform.
ProductAdmina Enterprise
Open AI governance with Admina Enterprise: NIS2 and AI Act without lock-in.
SolutionCybersecurity
CISO-as-a-service consulting to define posture and roadmap.
SolutionArtificial Intelligence
AI strategy, governance and responsible adoption for SMEs.
SolutionCloud & Web Apps
Cloud-native architectures, web apps and scalable microservices.
Insights
XRP Ledger: payment engine overflow and the role of AI
On 9 October XRPL disclosed an overflow in the xrpld payment engine that could have created spendable XRP beyond the total supply. Reported on 22 September by Cayden Liao and Veria AI, fixed on the 25th with an emergency release without an amendment. RippleX found no evidence of exploitation. What happened and what it means for anyone writing financial software.
Decree 179/2026: AI authorities, fines, work and training
The Italian Official Gazette of 8 October publishes Legislative Decree no. 179 of 7 October 2026 on the powers of the national AI authorities and on training. AgID is the notifying authority, ACN handles market surveillance and is the single point of contact, Banca d'Italia, CONSOB and IVASS cover high-risk systems in their sectors. Penalties up to €35 million or 7% of turnover, a regulatory sandbox, employment decisions reserved to a person. In force from 23 October.
Cyber Resilience Act: Italian decree, ACN and penalties
On 2 October the Italian Council of Ministers gave preliminary approval to the legislative decree adapting national law to Regulation (EU) 2024/2847. ACN is the notifying authority and the market surveillance authority and may rely on the Guardia di finanza; the AI authorities, Banca d'Italia, CONSOB, IVASS and the data protection authority supervise in their own areas. Consumer complaints go to CSIRT Italia, with an SME channel, proportionate fees and a regulatory sandbox, the Sandbox-CRA.
Frequently asked questions
How can an SME comply with NIS2 without an in-house SOC?
noze pairs CyberAgent's vulnerability assessment and automated pentest, on a monthly subscription, with DataGovern to handle NIS2, GDPR and the AI Act in one on-premise platform. CISO-as-a-service consulting sets posture and roadmap without hiring an internal security team.
How much does it cost to secure an SME?
CyberAgent is built for an SME budget: vulnerability assessment and pentest are delivered as a monthly subscription, with no need to build an internal red team. noze's platforms are affordable and come with ongoing support, so spending stays predictable and security does not depend on a single incident.
Can SMEs use generative AI and stay compliant with the AI Act?
With Admina Enterprise, SMEs adopt open AI governance that covers NIS2 and the AI Act without lock-in, bringing policies and traceability to how departments use LLMs. noze's AI strategy guides responsible adoption without giving up generative tools.