Business Continuity & Disaster Recovery (BCDR)
“DEFION BCDR: BCP, BIA, DRP, DDoS tests and performance testing. Know exactly how long your organisation will be down during an attack.”
DEFION Security
“DEFION Security is the new name of Computest (Netherlands) and Incide (Spain): an independent European cybersecurity firm founded in 2005, covering security advisory, penetration testing, managed detection and response, and digital forensics and incident response.”
Products & services
Digital Forensics & Incident Response (DFIR)
“24/7 incident response and digital forensics. DEFION specialists are ready within minutes for cyber incidents across Europe.”
Questions & answers
What is the difference between a BCP and a DRP?
“A BCP describes how your entire organisation keeps operating during a disruption. A DRP focuses specifically on restoring IT systems. Both are essential and complement each other.”
How long does a Business Impact Assessment take?
“On average 2–4 weeks, depending on your organisation's complexity. DEFION uses AI-assisted scenario analysis to accelerate the process.”
What does a DDoS test cost?
“It depends on scope and intensity. A standard DDoS test starts at €5,000. DEFION tests in a controlled manner, with no risk of real disruption.”
Is a BCP required for NIS2?
“Yes. NIS2 requires organisations to implement business continuity and crisis management measures. A BCP and DRP are essential components of that obligation.”
Can DEFION also conduct performance testing?
“Yes. Load tests, endurance tests and stress tests are part of our BCDR portfolio. We test how your systems perform under pressure and where the limits lie.”
What is a NIS2 Readiness Assessment?
“A structured analysis of your current security posture against NIS2 requirements. You get a gap analysis and a prioritised roadmap. Typical duration: 2–4 weeks.”
What does CISO as a Service cost?
“It depends on the number of days per month. DEFION provides senior security leadership from 2 days per month. You pay for expertise, not overhead.”
How does DEFION differ from large consultancies?
“We go technically deeper and move faster. No juniors running your assessment. No vendor agenda. And we stay available after the report is delivered.”
Does my organisation need to comply with NIS2 now?
“Yes, if you are in scope. In the Netherlands NIS2 is implemented by the Cyberbeveiligingswet (Cbw), in force since 15 August 2026, including mandatory registration with the NCSC. Board members are personally liable for the duty of care.”
What if I am not sure whether NIS2 applies to us?
“We determine that in the first conversation. Based on your sector, size and activities, we assess whether you qualify as essential or important.”
How fast can DEFION respond to an incident?
“With a retainer: within 2 hours. Without a retainer: as fast as possible, typically within 4–8 hours. 24/7, across Europe.”
What is the difference between IR and Digital Forensics?
“Incident Response focuses on containment and recovery. Digital Forensics focuses on evidence and reconstruction. We often combine both.”
What does an Incident Response Retainer cost?
“It depends on response time and scope. A retainer guarantees DEFION is immediately available. You pay a monthly fee plus any actual engagement hours.”
What is a Compromise Assessment?
“A forensic investigation to determine whether an attacker is already active in your network. We look for signs of compromise that standard monitoring misses.”
Can DEFION respond in Spain as well?
“Yes. DEFION has offices in Zoetermeer and Barcelona. Incident response is available across Europe, including on-site deployment where needed.”
What makes a good MDR provider for a Dutch organisation?
“Look at five things: who assesses the alerts at night and where that person sits, which response times are contractually fixed, whether you can inspect and export the detection rules, where your log data lives and who can access it, and whether incident response is available immediately without a new contract.”
How does DEFION differ from a classic SOC or a product-MDR?
“A classic SOC processes alerts; a product-MDR mainly watches its own product. DEFION has been independent since 2005, sells no security products and delivers MDR across your stack: Microsoft, CrowdStrike, Splunk or mixed.”
Does our data stay under our control, and what does that mean in practice?
“For Microsoft customers we monitor via Azure Lighthouse inside your own tenant: log data stays in your subscription, our access is least-privilege and visible in your audit logs, and when you leave you revoke the delegation without any migration.”
What is the difference between the Pentest Agent and a traditional pentest?
“The Pentest Agent tests autonomously, broadly and within 24 hours. A traditional pentest is fully performed manually by our certified hackers and goes deeper on specific business logic. You can combine both.”
Which AI does the Pentest Agent use, and is it EU-proof?
“Our Pentest Agent runs on AWS Bedrock in an EU region and uses multiple frontier security models for maximum coverage. Your data stays within the EU, is not used to train models and is not shared with the model providers. We're ready to deploy Mythos-class models, the latest generation of security AI, as soon as they become available.”
How long does a pentest take?
“The Pentest Agent delivers first results within 24 hours. The full manual pentest report is with you within 5 business days after the test.”
What does a pentest cost?
“A pentest starts from €2,500. The final price depends on scope and depth; you get a fixed price upfront, no surprises afterwards.”
Data formats & record details
Download this profile and inspect its supporting evidence.
- Entity ID
- urn:readyscan:entity:defion-security-q140043034
- Material fingerprint
- fnv1a64:61521c408170cb06
- Entity revision
- fnv1a64:7049667f09856b07
- Published
- 2026-10-22
- Modified
- 2026-10-22
- Source summary
- DEFION Security: “DEFION Security is the new name of Computest (Netherlands) and Incide (Spain): an independent European cybersecurity firm founded in 2005, covering security advisory, penetration testing, managed detection and response, and digital forensics and incident response.”