Skip to main content
Contact
BilgeQor

Security Services·Mobile App & Product Services

NIS2-oriented readiness for digital services.

Organizations in Croatia assessing NIS2-oriented cybersecurity readiness where relevant to their scope may require clear gap visibility and practical preparation guidance. BilgeQor provides independent security reviews, readiness gap identification, and secure product delivery support — without providing certification, regulatory determination, or official compliance status.

Explore servicesEmail our team

Written proposal-stage scope before any engagement decision

Readiness context informed by NIS2-oriented cybersecurity expectations. Engagements produce documented gap findings and prioritized remediation direction, not compliance certification.
Written proposal-stage scope before any engagement decision
Selected services show informational local-currency estimates with exact USD sources available through Show USD estimate; no checkout, payment, or intake on this route

Kubernetes
Docker
GitHub
Terraform
MITRE ATT&CK
Wazuh

Verified Croatia risk signals

Nacionalni CERT processed 1,513 cybersecurity incidents in calendar year 2025, a 35.9% year-on-year increase.

Nacionalni CERT's 2025 annual context shows the volume of processed cyber incidents, year-on-year growth, and bot observations recorded across Croatian national cybersecurity operations. For leadership, the practical issue is whether exposed systems, phishing paths, and business continuity readiness are being reviewed before they become operational, payment, customer-trust or recovery-cost issues.

1,513

processed incidents — 2025

Cybersecurity incidents processed by Nacionalni CERT in calendar year 2025.

+35.9%

year-on-year

Year-on-year increase in incidents processed by Nacionalni CERT from 2024 to 2025.

126,098

recorded bot observations

Compromised devices recorded as bot observations by Nacionalni CERT in calendar year 2025. Bot counts are observations, not confirmed operational-compromise counts.

Source: Nacionalni CERT 2025 Annual Report

Croatia Nacionalni CERT 2025 processed incident and bot-observation context only. Bot figures are observations, not confirmed compromises. Not total Croatian business cyberattack prevalence, cybercrime total, successful compromise count, private-sector prevalence, or industry-specific evidence.

Review relevant services

Not sure where to start?

Use the service family that best describes your current objective

Security Review Path

Start with a practical baseline to identify priority security gaps, then move to structured hardening when scope is clear — documented findings and clear remediation guidance throughout.

Start here

Security Baseline Review

Or consider

Website Security Hardening

Explore service context

Mobile App Path

Build or fix your mobile product — MVP development, rescue services, and security-integrated delivery.

Start here

Mobile App MVP Sprint

Or consider

Security-First App Launch

Explore service context

Platform Engineering

Scoped backend, API, cloud, production, rescue, and platform modernisation work with documented boundaries, controlled transition, operational visibility, and technical handover.

Start here

Secure Backend & API Engineering

Or consider

Cloud Platform & Production Engineering

Explore service context

AI Security & Integration Path

For teams assessing AI tools: governance documentation, security review, and permission-limited workflow discussion with written boundaries.

Start here

AI Governance, Policy & Data Safety Review

Or consider

AI Adoption & Workflow Discovery Review

Start with AI Governance

Use these service families to describe the outcome you want to discuss. Availability, scope, entity, timing, and any commercial terms are confirmed later in writing.

Additional Security Services: AI & Cloud Security Readiness Review, Incident Recovery Sprint, Care, Maintenance & Validation Plan →

Need custom scope or combined packages? Book a discovery call

BilgeQor Method

The Security File turns risk signals into decisions.

Official market data shows where risk exists. The BilgeQor Security File connects that context to your real websites, apps, accounts, payment flows and team responsibilities, so leaders can decide what to fix first.

View services
  1. 01

    Choose Service

    Explore the service context that best matches your objective.

  2. 02

    Proposal-stage discussion

    Email the team with non-sensitive context. A later written proposal determines whether work is offered.

  3. 03

    Written confirmation, if applicable

    No contract, payment, intake, delivery, or work start follows from browsing or an email inquiry.

  4. 04

    Separate activation only when authorized

    Any future engagement follows its own written scope, approvals, and applicable terms.

Proof stream

What we have scoped, reviewed and built.

A compact, attributed view of app delivery, security reviews, Engineering and Applied R&D work, and AI readiness cases drawn from the public case libraries.

Each card keeps its source and attribution boundary visible. Client identities and identifying operational details remain withheld where confidentiality requires it.

8App cases
34Security cases
16AI readiness cases
7Engineering proof cases
App workiPhone · iPad · Android

Meyo Party Video Stream

Multi-user live video platform built for social entertainment. Delivered cross-platform from a single codebase.

View proof
Security reviewFinancial Services

Essential Eight Baseline Review

The organisation submitted the review report to their cyber insurer as evidence of their current controls posture. Internal teams used the finding register to prioritise remediation work for the following quarter. A follow-on re-assessment was requested six months later.

View proof
Engineering & R&DPostgreSQL

Selected Engineering Work

TryMarketOps

Verified selected engineering work for public-data B2B company intelligence, buying-signal analysis, and AI-assisted scoring.

View proof
AI readinessOperations & Logistics

Workflow opportunity mapping before AI implementation

The team selected one narrow internal workflow as the first candidate and deferred customer-facing automation until data boundaries and governance controls were clearer.

View proof
App workiPhone · iPad · Android

Null Null Football Tips

Live match tips and football data app with real-time score feeds. Built for iOS and Android.

View proof
Security reviewProfessional Services

SME Cybersecurity Readiness Review

The firm used the executive summary as supporting documentation in their vendor questionnaire response. Internal partners implemented the priority access control findings before the client engagement commenced. A follow-on advisory engagement was discussed for ongoing quarterly review.

View proof
Engineering & R&DRust

Selected Engineering Work

x402Shield

Verified selected engineering work for Rust-based AI-agent, MCP-tool, and API-payment security.

View proof
AI readinessAdvisory & Professional Services

Internal knowledge assistant readiness for policies, templates and delivery notes

The team moved forward with a limited internal assistant over approved policy and template sources, while excluding client-specific and sensitive document classes.

View proof
App workiPhone · iPad · Android

Hukas Law Assistant

Document analysis and legal research tool with AI-assisted review. Built for mobile professionals.

View proof
Security reviewE-commerce

Website Security Hardening

Priority findings were resolved before the launch date. The team used the hardening checklist as a template for subsequent application deployments. No critical issues were identified after the post-remediation confirmation review.

View proof
Engineering & R&DRust

Selected Engineering Work

Custom zkVM & Zero-Knowledge Infrastructure

Verified selected engineering work for Rust-based verifiable computation, privacy-preserving execution, and zkVM infrastructure.

View proof
AI readinessConsumer Services

AI-assisted customer support triage and escalation planning

The team approved AI-assisted internal triage and drafting support, while keeping final responses, sensitive cases and customer-impacting actions under human control.

View proof
App workiPhone · iPad · Android

Physician Application

Mobile clinical management platform for healthcare practitioners. Built for iOS and Android.

View proof
Security reviewSaaS / Technology

Website Security Hardening

The team resolved all critical and high findings before the procurement deadline. The hardening report and remediation confirmation were submitted as part of the enterprise vendor security questionnaire. No further critical issues were identified in the post-remediation round.

View proof
Engineering & R&DQuantum-computing R&D

Independent R&D

Fujitsu Quantum Simulator Challenge

Independent R&D conducted on behalf of Ethosevo Independent R&D Lab for the Balanced MAX-CUT problem using constraint-aware QAOA.

View proof
AI readinessRevenue Operations

CRM-connected AI agent permission and action-boundary model

The team approved a read-and-draft agent concept first, while deferring CRM write-back and customer-facing actions until permission controls and approval gates were formally accepted.

View proof

Why BilgeQor

01

Supported by a verified operational network of more than 50 specialists, with documented scope, senior-led review, and accountable handoff.

02

Remote proposal-stage communication is coordinated through documented written follow-up.

03

Security-sensitive engagements follow a documented review workflow with scoped findings, written outputs and clear handoff.

04

Structured delivery discipline: scope defined before commitment, documented outputs, structured follow-up, and a buyer-visible handoff on every engagement.

05

Each engagement proceeds within confirmed written scope, agreed inputs and clearly documented delivery boundaries.

Frequently Asked Questions

Ready to discuss an objective?

Describe your readiness priorities and receive a structured proposal.

Explore servicesEmail our team

Selected services show informational local-currency estimates with exact USD sources available through Show USD estimate; no checkout, payment, or intake on this route