2,758
CERT.PT incidents — 2024
Cybersecurity incidents recorded by CERT.PT in calendar year 2024, excluding automated-source incidents. Must not be compared with figures that include automated sources.
Security Services·Mobile App & Product Services
NIS2-oriented readiness for digital growth.
Organizations in Portugal assessing NIS2-oriented cybersecurity readiness where relevant to their scope may require clear gap visibility and practical preparation guidance. BilgeQor provides independent security reviews, readiness gap identification, and secure product delivery support — without providing certification, regulatory determination, or official compliance status.
Written proposal-stage scope before any engagement decision
Readiness context informed by NIS2-oriented cybersecurity expectations. Engagements produce documented gap findings and prioritized remediation direction, not compliance certification.
Written proposal-stage scope before any engagement decision
Selected services show informational local-currency estimates with exact USD sources available through Show USD estimate; no checkout, payment, or intake on this route
Verified Portugal risk signals
CERT.PT recorded 2,758 cybersecurity incidents in 2024 (excluding automated sources), a 36% year-on-year increase, with 78% involving private entities.
CNCS / CERT.PT's 2024 incident context (excluding automated-source incidents) shows the volume, year-on-year growth, and entity-type distribution of reported cybersecurity incidents in Portugal. For leadership, the practical issue is whether phishing exposure, ransomware paths, and incident-response readiness are being reviewed before they become operational, payment, customer-trust or recovery-cost issues.
+36%
year-on-year
Year-on-year increase in CERT.PT incidents (excluding automated sources) from 2023 to 2024. Increase may reflect improved reporting and detection, not only actual attack volume change.
78%
private-entity share
Share of CERT.PT 2024 incidents (excluding automated sources) involving private entities.
Source: CNCS Riscos e Conflitos 2025 / CERT.PT 2024 context
Portugal CNCS / CERT.PT 2024 incident context only, excluding automated-source incidents. The 2,758 figure must not be compared with figures that include automated sources. CERT.PT, RNCSIRT, and CNPD are three separate datasets and must not be merged or summed. Not total Portuguese business cyberattack prevalence and not industry-specific evidence.
Not sure where to start?
Use the service family that best describes your current objective
Security Review Path
Start with a practical baseline to identify priority security gaps, then move to structured hardening when scope is clear — documented findings and clear remediation guidance throughout.
Start here
Security Baseline Review
Or consider
Website Security Hardening
Mobile App Path
Build or fix your mobile product — MVP development, rescue services, and security-integrated delivery.
Start here
Mobile App MVP Sprint
Or consider
Security-First App Launch
Platform Engineering
Scoped backend, API, cloud, production, rescue, and platform modernisation work with documented boundaries, controlled transition, operational visibility, and technical handover.
Start here
Secure Backend & API Engineering
Or consider
Cloud Platform & Production Engineering
AI Security & Integration Path
For teams assessing AI tools: governance documentation, security review, and permission-limited workflow discussion with written boundaries.
Start here
AI Governance, Policy & Data Safety Review
Or consider
AI Adoption & Workflow Discovery Review
Use these service families to describe the outcome you want to discuss. Availability, scope, entity, timing, and any commercial terms are confirmed later in writing.
Security Services
Security reviews, assessment support, and documented readiness guidance for organizations in Portugal.
NIS2-Oriented Cybersecurity Readiness Review
A practical baseline security review for existing web and mobile assets, with prioritised findings and a clear readiness roadmap before deeper security work
From 2 050,00 € EUR
Informational
Learn More
Website Security Hardening
Proactive website protection and security implementation
From 2 760,00 € EUR
Informational
Learn More
Mobile App & Product Services
Proposal-stage secure product and platform delivery discussions for organizations in Portugal.
Mobile App MVP Sprint
Rapid MVP delivery with security-first development
From 17 700,00 € EUR
Informational
Learn More
App Rescue & Rebuild
Recovery-focused rebuild scope for an existing product. Displayed rebuild-scope prices apply only after paid diagnostic assessment and confirmed rebuild scope. These are NOT diagnostic fees; a diagnostic request does not start rebuild work.
From 10 600,00 € EUR
Informational
Learn More
Additional Security Services: AI & Cloud Security Readiness Review, Incident Recovery Sprint, Care, Maintenance & Validation Plan →
Need custom scope or combined packages? Book a discovery call
BilgeQor Method
The Security File turns risk signals into decisions.
Official market data shows where risk exists. The BilgeQor Security File connects that context to your real websites, apps, accounts, payment flows and team responsibilities, so leaders can decide what to fix first.
View services- 01
Choose Service
Explore the service context that best matches your objective.
- 02
Proposal-stage discussion
Email the team with non-sensitive context. A later written proposal determines whether work is offered.
- 03
Written confirmation, if applicable
No contract, payment, intake, delivery, or work start follows from browsing or an email inquiry.
- 04
Separate activation only when authorized
Any future engagement follows its own written scope, approvals, and applicable terms.
Proof stream
What we have scoped, reviewed and built.
A compact, attributed view of app delivery, security reviews, Engineering and Applied R&D work, and AI readiness cases drawn from the public case libraries.
Each card keeps its source and attribution boundary visible. Client identities and identifying operational details remain withheld where confidentiality requires it.
8App cases
34Security cases
16AI readiness cases
7Engineering proof cases
Why BilgeQor
01
Supported by a verified operational network of more than 50 specialists, with documented scope, senior-led review, and accountable handoff.
02
Remote proposal-stage communication is coordinated through documented written follow-up.
03
Security-sensitive engagements follow a documented review workflow with scoped findings, written outputs and clear handoff.
04
Structured delivery discipline: scope defined before commitment, documented outputs, structured follow-up, and a buyer-visible handoff on every engagement.
05
Each engagement proceeds within confirmed written scope, agreed inputs and clearly documented delivery boundaries.
Frequently Asked Questions
Ready to discuss an objective?
Describe your readiness priorities and receive a structured proposal.
Selected services show informational local-currency estimates with exact USD sources available through Show USD estimate; no checkout, payment, or intake on this route