Cyber Praxis

Digital evidence that holds up. Systems that hold out.

A registered court expert and an ISO/IEC 27001 certified firm, Cyber Praxis investigates incidents, tests your defences and supports your compliance, in Belgium and France.

Describe your situation See our services
Forensics and expert witness Smartphones, computers, servers, cameras Penetration testing Applications, networks, simulated phishing Outsourced DPO and CISO GDPR and security leadership NIS2, CyFun, ISO 27001 Audits and compliance
  • Registered court expertListed in the Belgian Federal Public Service Justice register under number EXP2018610.
  • ISO/IEC 27001:2022 certifiedDigital forensics is within the certified scope.
  • Over 25 years in cybersecurityGovernance and CISO roles in finance, the public sector, energy and industry.

Four areas, one standard of proof

Whether the task is establishing facts before a judge or demonstrating compliance to a regulator, the work rests on the same discipline: findings that are verifiable, documented and limited to what the evidence supports.

  • Digital forensics and expert witness work

    For lawyers, insurers, companies and individuals facing a dispute, fraud or an incident.

    • Analysis of iOS and Android smartphones, computers and servers
    • Detection of spyware and abusive surveillance on phones
    • Extraction and analysis of CCTV recordings and connected devices
    • Investigation after ransomware or intrusion, timeline reconstruction
    • Court-appointed expertise, or technical adviser to one party
    Discuss a case

  • Penetration testing

    For organisations that want to know what an attacker would find, before they find it.

    • Web application and API testing
    • External and internal infrastructure testing
    • Vulnerability assessment and remediation priorities
    • Simulated phishing campaigns and awareness
    Schedule a test

  • Outsourced DPO and CISO

    For organisations that need expert leadership without a full-time hire.

    • Data protection officer (DPO), appointed or in support
    • Records of processing, impact assessments, data subject requests
    • Chief information security officer (CISO): roadmap, policies, risk management
    • Artificial intelligence governance under ISO/IEC 42001
    Discuss support

  • NIS2, CyFun and ISO 27001 compliance

    For essential and important entities, local authorities and their suppliers.

    • Assessment of your NIS2 scope and obligations
    • Audits against the Centre for Cybersecurity Belgium's CyberFundamentals (CyFun) framework
    • Preparation for ISO/IEC 27001 certification
    • Incident response plans and exercises
    Assess your situation

Solutions to fix what the audit uncovers

Identifying a gap is not enough. We deploy and support tools chosen for their auditability and controlled cost.

  • Vauban

    Open-source privileged access management (PAM) bastion

    Controls, records and monitors administrator and contractor access to servers, workstations and industrial equipment. Directly addresses the privileged access requirements of NIS2, ISO 27001 and CyFun.

    Discover Vauban

How an engagement works

Every engagement follows the same sequence, so you always know what is being done, why, and at what cost.

  1. First conversation

    You describe the situation in confidence. We check for conflicts of interest and what can be established.

  2. Written proposal

    Scope, method, timing and budget are agreed in writing before any work begins.

  3. Fieldwork

    Acquisition, testing or audit following a documented method, with traceability of media and operations.

  4. Report and debrief

    A clear report for decision-makers and technical staff, walked through with you.

Latest articles

Analysis and field experience on digital forensics, regulation and systems security. All articles

Frequently asked questions

The questions we hear most often at a first contact.

Can a privately commissioned expert report be submitted in court?

Yes. A report prepared at a party's request can be filed as evidence. The judge freely assesses its probative value, which depends mainly on the method: documented acquisition, hash values of the media, chain of custody, identified tools, and conclusions limited to what the traces establish.

What is the difference between a court-appointed expert and a technical adviser?

The court-appointed expert is designated by the judge and works for the court, independently of the parties. A technical adviser is retained by one party to analyse the evidence, attend the expert's operations and make observations. Cyber Praxis can act in either role, never both in the same case.

Is my organisation covered by NIS2 in Belgium?

The Belgian law of 26 April 2024 transposes the NIS2 Directive. It applies to essential and important entities across many sectors, depending on their activity and size. The Centre for Cybersecurity Belgium's CyberFundamentals (CyFun) framework helps structure compliance. A first conversation is usually enough to determine whether and how you are covered.

How is the data you entrust to us protected during an engagement?

Cyber Praxis is ISO/IEC 27001:2022 certified, and digital forensics is within the certified scope. Media and copies are tracked, stored securely and returned or destroyed at the end of the engagement as agreed.

Do you work in France and in other languages?

Yes. Cyber Praxis works in Belgium and France, in French, Dutch and English.

Describe your situation

Briefly describe what you need. Please do not include sensitive details of an ongoing case here: we will discuss them by phone.

Registered office
Lasne, Walloon Brabant, Belgium

By clicking “Send request”, you acknowledge the information on how your data is processed to handle your request. Submitting this form does not automatically subscribe you to our marketing communications. See our privacy policy.