We deliver cyber
serenity

Focus on your business while we take care of your cybersecurity

Discover our solutions
Contact us
Latest news
This is the cover image of the blog article 'Why a well-tuned WAF matters'.

Why a well tuned WAF matters

Offline, or protected? It did not have to be that way. A Web Application Firewall can step in exactly where PHP2Shell strikes. But having a WAF is not the same as being protected: the difference lies in how it is tuned.   What you will find in the advisory How the attack works, and why […]

PHP2Shell: Your website is back online. But is it safe?

What happened On 21 October 2026, PHP released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. They allow remote code execution without a login and carry a CVSS v4.0 score of 9.2. According to PHP, all installations serving web requests are affected, including PHP-FPM, Apache mod_php and php-cgi. The fixes are in versions 8.5.12, 8.4.27, […]

This is the cover image for the blog article "CRA reporting readiness: what does it take in practice? ".

CRA reporting readiness: what does it take in practice?

CRA reporting obligations started earlier than many organisations expected. Since 11 September 2026, manufacturers of in-scope products with digital elements need to be able to report actively exploited vulnerabilities and severe product-security incidents to ENISA and the designated CSIRT coordinator, such as the CCB in Belgium. For many organisations, December 2027 has become the date […]

This is the cover image of the blog about CRA.

The CRA reporting clock is already running: Is your organisation ready?

For many organisations, the CRA is still associated with December 2027. That is when the regulation becomes broadly applicable to products with digital elements placed on the EU market. But the first operational obligations arrived earlier, and they are already in force.   Why does 11 September 2026 matter more than December 2027? The July […]

This is a picture of a AXS Guard Firewall appliance.

Perimeter Security and Access Management: Why a “Secure by Design” Architecture makes the difference

At AXS Guard by Approach Cyber, we believe that effective perimeter security begins with the core architecture of the product itself. An incident like this serves as a critical reminder of the importance of a Zero Trust approach and strict management of administrative environments.   How AXS Guard inherently prevents these risks: No public access to management functions by default: The AXS Guard management platform is not accessible directly from the public internet via simple IP addresses using default credentials. Administrative access requires strict authentication paths. Mandatory Multi-Factor Authentication (MFA):

Approach Cyber, your trusted partner in cyber resilience

In an increasingly unpredictable digital world, prevention alone is no longer enough. We are your local and pragmatic cyber security partner delivering complete cyber resilience, to bring you digital peace of mind.

Ask for an audit

The Triangle of 

Cyber Resilience

Three Pillars. One Resilient Business.

Strategic Advice sets the direction and helps you make informed security decisions. Adaptive Security puts that strategy into practice, powered by our sovereign AXS Guard platform. Continuous Operations keep your defences effective and validate your resilience every day. Each pillar delivers value on its own. Together, they provide a comprehensive approach to cyber resilience.

Check our solutions

Clients who trust us

Hopital Erasme logo
European Defence Fund logo
Brasserie Lefebvre logo
itsme logo
EVS logo
FPS FInance logo
Digipolis logo
Etex logo

Our key facts

25+

Years of experience

100

People in the team

2000+

Clients

24/7

Support

4

Offices

Insights & resources

NIS2 in Belgium: From updating to long-term compliance

The European NIS2 Directive requires affected organisations to demonstrate a high and sustained level of cybersecurity. The key deadlines have now passed, including the 18 April 2026 deadline for critical entities.

Beyond the inbox: Turning your employees into a Human Firewall

In an exclusive webinar hosted by Approach Cyber in partnership with KnowBe4, security experts broke down why traditional security awareness programs fail and how organisations can build an impenetrable “Human Firewall.”

How an exposed server became a weapon, findings of our own experiment

At Approach Cyber/AXS Guard, we don’t just rely on theory. We want to understand our adversaries. As an experiment we put a ‘vulnerable’ innocent looking service online and left it there to see who would find it. What happened next was a good reminder of how the internet really works: it doesn’t take long for an exposed service to become someone else’s weapon.

Digital sovereignty: What’s the fuss about?

Three years ago, no one was talking about it, and now it feels like the term “digital sovereignty” is popping up everywhere. That’s no coincidence. It’s not a sudden hype, but the result of a storm of geopolitical, legal, and technological developments that have gained momentum in recent years.

Threat modeling & secure development: Risk assessment is now a legal requirement – Is your team ready?

For years, threat modeling was the mark of a mature security team: valuable, recommended, but ultimately optional. That era is over. With the EU Cyber Resilience Act and NIS2 now shaping how software must be built across Europe, threat modeling has quietly become a compliance obligation. The question is no longer whether your team should do it. It’s whether your team is equipped to do it well.

Why a well tuned WAF matters

When PHP2Shell became public, many organisations faced a hard choice: stay online and exposed, or switch their websites off until they could patch. Across Europe, websites of governments, hospitals and public services went offline as a precaution.

PHP2Shell: Your website is back online. But is it safe?

Most websites taken offline because of PHP2Shell are back online. That is good news. But “back online” is not the same as “safe”. In this short article, we explain what happened, which questions remain after patching and how to address them.

CRA reporting readiness: what does it take in practice?

The first CRA obligations have applied since 11 September 2026. Here is what manufacturers need to have in place.

The CRA reporting clock is already running: Is your organisation ready?

Since 11 September 2026, manufacturers of products with digital elements that fall within the scope of the Cyber Resilience Act (CRA) must be able to report actively exploited vulnerabilities and severe product-security incidents. Reports go to ENISA and the designated CSIRT coordinator, such as the CCB in Belgium, and the first early warning is due within 24 hours.

Perimeter Security and Access Management: Why a “Secure by Design” Architecture makes the difference

In the cybersecurity sector, we regularly see incidents where the very devices meant to protect networks become the targets themselves. A recent example involves concerns around publicly accessible firewalls where configuration flaws or exposed credentials (such as default admin accounts) were leaked onto the internet via external portals.

Turn Your Employees Into Your Strongest Cyber Defense

Hackers Aren’t Hacking Your Network. They’re Hacking Your People. Let’s be honest: you can invest a fortune in top-tier cyber security technology, but all it takes is one distracted employee clicking the wrong link to bring it all crashing down.

Join us at Cybersec Europe 2026

By combining forces of AXS Guard and Approach Cyber, we are confident to tackle today’s and tomorrow’s challenges for our customers by launching The Triangle of Cyber Resilience. We bring together strategic advice, adaptive security, and continuous operations to maximize your resilience and offer serenity. Local. Complete. Pragmatic. And well worth a visit to our booth!

Approach Cyber at ConnectIT 2026

Connect IT is not a traditional IT trade fair, but a place where innovation comes to life. V-ICT-OR (Flemish ICT Organisation) and TMAB Business Events, in collaboration with Agoria and Belgium’s Cyber Security Coalition, are creating the ultimate meeting platform where technology, innovation and a new generation of thinkers from various sectors come together.

Getting started with AI governance

AI governance is becoming essential with the EU AI Act. In this webinar, Approach Cyber and Yields share a pragmatic way to get started quickly—identify AI use cases, assess risk, and build an actionable governance roadmap that supports safe innovation.

AXS Guard Tech Talk – The Chillionaires Edition 

Step into The Chillionaires Edition, a unique half-day Tech Talk Series by AXS Guard and Approach Cyber, where cutting-edge cyber security meets relaxed networking. Join us in Waterloo, Liège, or Gent for expert talks, live case studies, and a fresh look at NIS2 compliance, SOC insights, and AI-driven threats.

Could the French supermarket fridge attack happen in Belgium?

The news hit the headlines at the beginning of this week: an unidentified threat actor abused a vulnerability in the temperature controllers of freezers in multiple French supermarkets, causing perishable goods to thaw to the point where they had to be thrown away. In the night of 11 to 12 October, hundreds of stores across Intermarché/Netto, Coopérative U, Carrefour, Monoprix and Leclerc were affected. Could it happen in Belgium? Yes.

Red team vs blue team: what penetration testing really tests

Red team and blue team are borrowed from military wargaming: attackers versus defenders. In cybersecurity, the red team runs authorised attacks, including penetration testing, while the blue team detects and responds. Approach Cyber, formed from the merger of AXS Guard and Approach Cyber, now delivers both.

Out-of-office replies: a hidden cybersecurity risk

Setting up an out-of-office (OOO) reply is usually the last thing on your list before a holiday, so it gets written in a hurry. But a careless auto-reply can hand an attacker exactly what they need for phishing or social engineering: who is away, for how long, and who is covering for them.

Security awareness needs precise phishing detection, not just alerts

Not every phishing email aims to install malware. Many are built purely to harvest credentials, and MITRE ATT&CK classifies that behaviour as Phishing for Information (T1598), not Phishing (T1566) for initial access. The distinction matters: it sharpens detection, demonstrates genuine SOC maturity, and closes gaps that a generic security awareness programme alone cannot catch.

How CPS threat detection strengthens OT security without downtime

CPS threat detection secures operational technology (OT) environments by passively monitoring network traffic, instead of forcing IT and OT teams to merge systems or standards. It gives security teams full visibility into industrial assets and threats in real time, without touching production, downtime, or existing OT processes. In a previous article, “OT-Security vs IT-Security,” we looked at the substantial differences between IT and OT. This one goes further: how do you actually strengthen OT security once you understand those differences?

Why Chaomatic Trusts ITBS and AXS Guard

IT Business Solutions AXS Guard and IT Business Solutions have enjoyed a strong partnership for 20 years. Based on that trust, we interviewed Lionel Simons, CEO of ITBS, to learn his reasons for choosing AXS Guard for his end customers.

MIVAS: A Pioneer in Socio-Economic Entrepreneurship and Information Security

MIVAS is a socio-economic enterprise with over 700 employees, approximately 140 of whom are support staff. The organization provides employment opportunities for people with a distance to the labour market, balancing economic and social goals. This approach benefits both MIVAS’s customers and employees.​

Kinderpostzegels: 25 years on, a children’s charity moves to managed cybersecurity

Kinderpostzegels is a Dutch charity dedicated to empowering children facing life’s challenges. Poverty, loneliness and domestic difficulties can hinder a child’s development, leaving many feeling disadvantaged. Kinderpostzegels is committed to giving these children the support and opportunities they need to thrive, believing every child deserves an equal chance to succeed. Through impactful programmes that foster resilience, encourage critical thinking and empower children to take ownership of their lives, the organisation makes a difference in children’s lives, in the Netherlands and around the world, 365 days a year.

Intersig Gains Peace of Mind with Managed EDR Protection

Intersig ranks among the world’s largest manufacturers of construction steel, known for its focus on high-quality, innovative products and services and a workforce driven by ambition. Sustainable practices are woven into the company’s day-to-day approach.

How Optimum Sorting Connected Its Global Sites Securely

Optimum Sorting develops advanced technological solutions and needs to protect its sensitive business data accordingly.

DO YOU WANT TO GO TO WORK SMILING EVERYDAY?

Find out if we're a match!

At Approach Cyber, we believe everyone deserves digital peace of mind. Inspired by the vision, our mission is to protect our clients’ digital assets, allowing them to focus on what matters most—their business.  

Our purpose is to deliver cyber serenity to society empowering individuals and organisations to navigate the digital world with confidence and trust. If you share our commitment to secure the digital future, we invite you to explore our career opportunities today.

Join us
Explore our services
Ask for an audit
Facebook-f Linkedin-in Youtube