About
HodeiShield is a cyber risk and compliance platform for European companies that need to prove their security, not just claim it, under DORA, NIS2, ENS, ISO 27001, the EU AI Act and more.
It brings together what most teams run across spreadsheets, email and five different tools (compliance, suppliers, exposure, incidents, endpoints and board reporting) into one continuous cycle with four pillars.
SENSE: see your real exposure
- External exposure radar. Certificates, ports, headers and CVEs checked from the outside, with nothing asked of the supplier.
- Supply chain and SBOM. Get alerted when a new vulnerability affects a component or supplier you depend on.
- Endpoint security. A lightweight agent that reports device posture, with signed attestations.
PREDICT: understand the risk before it hits
- Third-party risk. Explainable risk scores for every supplier, with the breakdown and the trend.
- Multi-framework compliance. Map one control and one piece of evidence across DORA, NIS2, ENS and ISO 27001 instead of documenting it four times.
ACT: respond, with a human in the loop
- Incident management. Classify an incident and see the DORA and NIS2 notification deadlines, with the authority report generated from it.
- Supplier questionnaires. Answered on a portal, with evidence attached.
- AI governance. Register the AI systems your organisation uses and manage your EU AI Act obligations.
- Virtual CISO and HodeiAI. Guidance and an AI assistant that work on your own data. They suggest the next step; they don’t act on their own.
ATTEST: prove it to others
- DORA Register of Information. Generate it as an xBRL-CSV package with the EBA structure.
- Board reports. A readable view of cyber risk for management and the board.
- Trust Center and Attest. Publish your security posture, with evidence whose integrity and origin can be verified cryptographically.
FEATURES
External exposure radar: checks for security issues from outside without asking suppliers
Supply chain alerts: notifies you about new vulnerabilities in your suppliers
Endpoint security: monitors your devices to ensure they are secure
Third-party risk scores: provides easy-to-understand risk scores for your suppliers
Multi-framework compliance: lets you document compliance for multiple standards at once
Incident management: helps you track and report security incidents
Supplier questionnaires: allows suppliers to answer questions and upload necessary documents
AI governance: keeps track of your AI systems and compliance needs