Energy
Electricity, gas, oil, district heating
NIS2 · ARTICLE 23 · EU
NIS2 is already live.
Evidence cannot be improvised afterwards.
NIS2 asks in-scope organisations for an early warning within 24 hours of becoming aware of a significant incident. Without trustworthy detection you cannot say when that clock started, let alone what happened. Vantuz gives you the moment of awareness and the evidence behind it. It does not make you compliant on its own, and we will not tell you it does.
24hearly-warning window after awareness
72hincident notification
18sector groups in scope
2024applying across the EU since October
WHAT IT ASKS
What Article 23
actually demands.
The directive reaches essential and important entities across Europe, including many digital providers, managed service providers, cloud services and mid-market companies in regulated sectors. The practical duty is the same for all of them: know quickly, document properly, decide with evidence.
See alsoOur approach to security
Where Vantuz helps4 duties
Become aware of significant incidents quicklyDecoys create high-confidence breach signals when touched; the Exposure Sonar finds what is open before anyone uses it.
Document evidence and timelineAutomated incident timeline, attacker context and an audit trail of every response action.
Assess Article 23 notification dutiesAn incident dossier helps your team decide what must be reported, and when the clock started.
Show risk-management measuresCoverage reports say what was checked and what was not; findings carry the fix and the verification.
THE DOSSIER
Everything the notification
will ask you for.
When a decoy fires, Vantuz assembles the evidence your team, your lawyer and your regulator will want, in the order they will ask for it.
Incident dossierPDF export
Attacker source and geolocationNetwork, country, residential or datacenter, Tor exit flag.
TimestampsUTC and your local time, sub-second precision.
Decoy triggeredWhich format, where it was planted, when.
Risk scoreDeterministic 0 to 100, with the breakdown of each input.
MITRE techniquesTactic and technique IDs for the observed chain.
Response actionsEvery action Vantuz executed, with timestamps and results.
Evidence chainOrdered event log suitable for legal and regulatory review.
WHO IS IN SCOPE
Sectors the directive reaches.
A non-exhaustive view of the sector groups. Whether your organisation is essential, important or out of scope depends on size and national transposition; ask your counsel.
Transport
Air, rail, road, water
Banking
Credit institutions
Financial markets
Trading venues, central counterparties
Healthcare
Hospitals, labs, device manufacturers
Drinking water
Supply and distribution
Digital infrastructure
DNS, TLD registries, IXPs, data centres
ICT service management
MSPs, MSSPs
Public administration
Central and regional government
Cloud services
IaaS, PaaS, SaaS at scale
This page explains how the product supports incident readiness. It is not legal advice.
SEE IT LIVE
Watch it catch an attack.
Then decide.
Thirty minutes, your environment. We plant a decoy, trigger it on purpose,
and you watch the whole response happen. No slides.