Cybersecurity for companies in Bulgaria

OfSec provides cybersecurity services to companies and organisations in Bulgaria. When an incident happens (ransomware, a compromised website or mailbox, a data leak), we contain the damage and support the recovery. Through audits and penetration tests we find gaps in your defences before anyone can exploit them, and we bring your technical measures in line with the Bulgarian Cybersecurity Act (NIS2) and the GDPR.

Report an incident Request an assessment

Incident response

Guidance for the first hours of the most common incidents.

Services and prices

Prices are fixed for the agreed scope. If the assessment shows that more work is needed, we send you a new quote before continuing.

Service	Scope	Price excl. VAT
Incident response	Containing the attack, establishing the cause and supporting the recovery.	from €60 / hour
Express security checkfirst step	External scan of the domain, website, email and exposed services, with manual verification of every finding.	€199
Website or online shop security audit	WordPress, WooCommerce and custom applications. Report with specific remediation steps.	€449
Office network audit	Router, Wi-Fi, workstations, business email and backups.	€599
Web application penetration test	Up to 2 days of manual testing (€990) or an extended version of up to 4 days (€1,990).	from €990
Microsoft 365 audit	Email and sharing settings, multi-factor authentication and access rights.	€399
Active Directory assessment	Permissions, password policies and possible privilege escalation paths.	from €1,790
API or external network penetration test	Up to 3 days of manual testing.	€1,490
Cybersecurity Act (NIS2) assessment	Comparison of your technical measures with the legal requirements. Not a certification.	from €1,490
GDPR technical measures	Assessment of encryption, access control, backups, logging and breach response. Legal documents not included.	from €599
Vulnerability remediation	Fixes by our developers in .NET, PHP, WordPress and WooCommerce.	on quote
Monthly security monitoring	Weekly external scans and immediate notification of critical issues.	from €79 / month

The final price is confirmed in the written proposal after the scope has been reviewed.

Cybersecurity Act (NIS2) and GDPR

Technical assessment of compliance with cybersecurity and personal data protection requirements.

NIS2 · Bulgarian Cybersecurity Act

Which organisations NIS2 covers

The NIS2 Directive extends cybersecurity obligations to many more organisations. It mainly covers medium and large enterprises (50 or more employees, or turnover above €10 million) in sectors such as energy, transport, healthcare, manufacturing, food, digital services and waste management. Some organisations are covered regardless of size.

In Bulgaria the obligations are set out in the Cybersecurity Act, amended in February 2026. We establish whether your organisation is in scope, compare your technical measures with the requirements and prepare a plan with actions and deadlines.

Request a NIS2 assessment

GDPR · personal data protection

Technical measures for personal data protection

The GDPR requires “appropriate technical and organisational measures” to protect personal data. We assess and implement the technical measures: encryption, access control, backups, logging and breach response.

Legal documents (policies, records, internal rules) are not part of the service; for those we recommend a data protection lawyer. We do not act as a data protection officer.

Request a GDPR assessment

Free cybersecurity self-assessment checklist

30 technical measures every organisation should have, with an explanation of why each one is needed and what to do if it is missing.

Passwords, two-factor authentication and staff access
Backups that survive a ransomware attack
Protecting business email against fake messages (SPF, DKIM, DMARC)
Websites and online shops: updates and configuration
When the law requires you to notify the data protection authority or report an incident

How we work

Written communication

Communication takes place by email, so every agreement is documented.

NDA and two-stage payment

We sign a non-disclosure agreement. Work starts once an advance is paid against a proforma invoice; the balance is due when the report is delivered.

Reports in plain language

Each report has a summary for management and technical detail for developers.

Vulnerability remediation

Our developers fix the issues found, after which we test again.

Methodology

We work to OWASP WSTG, PTES and NIST SP 800-115. Every finding is verified manually before it goes into the report.

Our own security

Our website uses no tracking cookies and no third-party scripts. Our vulnerability disclosure policy is public.

Guides for companies

All articles

Report an incident or request an assessment

Describe the situation and you will receive a written reply: whether we can help, what the scope is and what it will cost.

We work with companies and organisations only. We do not accept requests to access other people’s accounts, phones or correspondence, or to track individuals.

Type of request Incident in progress Assessment or audit Cybersecurity Act (NIS2) GDPR technical measures

Company Company ID or VAT number (optional) Name and position Work email Situation Description of the situation and the actions taken so far Files (optional)Screenshots, the ransom note, a suspicious email as .eml. Up to 5 files, 3 MB in total. Please do not attach executables or archives. I understand that work starts after confirmation and payment of an advance.

We use the data only to reply to your request. If no engagement starts, we delete it within 30 days. Privacy

What happens next

We reply in writing within one working day (Monday to Friday, 9:00 to 18:00 Bulgarian time).
We send a proposal with scope, timeline and price.
We sign a non-disclosure agreement and issue a proforma invoice for the advance.
We keep you informed in writing while the work is in progress.
We deliver the report and issue the final invoice for the full amount, against which the balance is paid.