We deliver cyber
serenity

Focus on your business while we take care of your cybersecurity

Discover our solutions
Contact us
Latest news

FACT demonstrates the operational value of federated cyber-physical testing in Riga

Riga, Latvia, 30 October 2026. The European Defence Fund (EDF) co-funded FACT (Federated Advanced Cyber-Physical Test Range) project held its End of Project Demonstration (EoPD) in Riga, Latvia, from 28 to 30 October 2026. Bringing together project partners, European Commission representatives, relevant stakeholders and representatives from different European Ministries of Defence, the event showcased the […]

This is the cover image of the blog article 'Why a well-tuned WAF matters'.

Why a well tuned WAF matters

Offline, or protected? It did not have to be that way. A Web Application Firewall can step in exactly where PHP2Shell strikes. But having a WAF is not the same as being protected: the difference lies in how it is tuned.   What you will find in the advisory How the attack works, and why […]

PHP2Shell: Your website is back online. But is it safe?

What happened On 21 October 2026, PHP released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. They allow remote code execution without a login and carry a CVSS v4.0 score of 9.2. According to PHP, all installations serving web requests are affected, including PHP-FPM, Apache mod_php and php-cgi. The fixes are in versions 8.5.12, 8.4.27, […]

This is the cover image for the blog article "CRA reporting readiness: what does it take in practice? ".

CRA reporting readiness: what does it take in practice?

CRA reporting obligations started earlier than many organisations expected. Since 11 September 2026, manufacturers of in-scope products with digital elements need to be able to report actively exploited vulnerabilities and severe product-security incidents to ENISA and the designated CSIRT coordinator, such as the CCB in Belgium. For many organisations, December 2027 has become the date […]

This is the cover image of the blog about CRA.

The CRA reporting clock is already running: Is your organisation ready?

For many organisations, the CRA is still associated with December 2027. That is when the regulation becomes broadly applicable to products with digital elements placed on the EU market. But the first operational obligations arrived earlier, and they are already in force.   Why does 11 September 2026 matter more than December 2027? The July […]

Approach Cyber, your trusted partner in cyber resilience

In an increasingly unpredictable digital world, prevention alone is no longer enough. We are your local and pragmatic cyber security partner delivering complete cyber resilience, to bring you digital peace of mind.

Ask for an audit

The Triangle of 

Cyber Resilience

Three Pillars. One Resilient Business.

Strategic Advice sets the direction and helps you make informed security decisions. Adaptive Security puts that strategy into practice, powered by our sovereign AXS Guard platform. Continuous Operations keep your defences effective and validate your resilience every day. Each pillar delivers value on its own. Together, they provide a comprehensive approach to cyber resilience.

Check our solutions

Clients who trust us

University of Copenhagen logo
Speos logo
Group S logo
Gambit logo
Mobilexpense logo
Rgf Staffing logo
Service Public de Wallonie logo
Theatre de Poche logo

Our key facts

25+

Years of experience

100

People in the team

2000+

Clients

24/7

Support

4

Offices

Insights & resources

NIS2 in Belgium: From updating to long-term compliance

The European NIS2 Directive requires affected organisations to demonstrate a high and sustained level of cybersecurity. The key deadlines have now passed, including the 18 April 2026 deadline for critical entities.

Beyond the inbox: Turning your employees into a Human Firewall

In an exclusive webinar hosted by Approach Cyber in partnership with KnowBe4, security experts broke down why traditional security awareness programs fail and how organisations can build an impenetrable “Human Firewall.”

How an exposed server became a weapon, findings of our own experiment

At Approach Cyber/AXS Guard, we don’t just rely on theory. We want to understand our adversaries. As an experiment we put a ‘vulnerable’ innocent looking service online and left it there to see who would find it. What happened next was a good reminder of how the internet really works: it doesn’t take long for an exposed service to become someone else’s weapon.

Digital sovereignty: What’s the fuss about?

Three years ago, no one was talking about it, and now it feels like the term “digital sovereignty” is popping up everywhere. That’s no coincidence. It’s not a sudden hype, but the result of a storm of geopolitical, legal, and technological developments that have gained momentum in recent years.

Threat modeling & secure development: Risk assessment is now a legal requirement – Is your team ready?

For years, threat modeling was the mark of a mature security team: valuable, recommended, but ultimately optional. That era is over. With the EU Cyber Resilience Act and NIS2 now shaping how software must be built across Europe, threat modeling has quietly become a compliance obligation. The question is no longer whether your team should do it. It’s whether your team is equipped to do it well.

FACT demonstrates the operational value of federated cyber-physical testing in Riga

European collaboration puts cyber-physical asset readiness, trusted testing and operational resilience to the test.

Why a well tuned WAF matters

When PHP2Shell became public, many organisations faced a hard choice: stay online and exposed, or switch their websites off until they could patch. Across Europe, websites of governments, hospitals and public services went offline as a precaution.

PHP2Shell: Your website is back online. But is it safe?

Most websites taken offline because of PHP2Shell are back online. That is good news. But “back online” is not the same as “safe”. In this short article, we explain what happened, which questions remain after patching and how to address them.

CRA reporting readiness: what does it take in practice?

The first CRA obligations have applied since 11 September 2026. Here is what manufacturers need to have in place.

The CRA reporting clock is already running: Is your organisation ready?

Since 11 September 2026, manufacturers of products with digital elements that fall within the scope of the Cyber Resilience Act (CRA) must be able to report actively exploited vulnerabilities and severe product-security incidents. Reports go to ENISA and the designated CSIRT coordinator, such as the CCB in Belgium, and the first early warning is due within 24 hours.

Turn Your Employees Into Your Strongest Cyber Defense

Hackers Aren’t Hacking Your Network. They’re Hacking Your People. Let’s be honest: you can invest a fortune in top-tier cyber security technology, but all it takes is one distracted employee clicking the wrong link to bring it all crashing down.

Join us at Cybersec Europe 2026

By combining forces of AXS Guard and Approach Cyber, we are confident to tackle today’s and tomorrow’s challenges for our customers by launching The Triangle of Cyber Resilience. We bring together strategic advice, adaptive security, and continuous operations to maximize your resilience and offer serenity. Local. Complete. Pragmatic. And well worth a visit to our booth!

Approach Cyber at ConnectIT 2026

Connect IT is not a traditional IT trade fair, but a place where innovation comes to life. V-ICT-OR (Flemish ICT Organisation) and TMAB Business Events, in collaboration with Agoria and Belgium’s Cyber Security Coalition, are creating the ultimate meeting platform where technology, innovation and a new generation of thinkers from various sectors come together.

Getting started with AI governance

AI governance is becoming essential with the EU AI Act. In this webinar, Approach Cyber and Yields share a pragmatic way to get started quickly—identify AI use cases, assess risk, and build an actionable governance roadmap that supports safe innovation.

AXS Guard Tech Talk – The Chillionaires Edition 

Step into The Chillionaires Edition, a unique half-day Tech Talk Series by AXS Guard and Approach Cyber, where cutting-edge cyber security meets relaxed networking. Join us in Waterloo, Liège, or Gent for expert talks, live case studies, and a fresh look at NIS2 compliance, SOC insights, and AI-driven threats.

No waiting for a fix: how we patched every AXS Guard against a critical Linux flaw

When a critical vulnerability in the Linux kernel became public this week, many organisations found themselves waiting for their vendor to release a fix. AXS Guard customers did not have to wait: we rolled out the patch to every AXS Guard appliance.

Could the French supermarket fridge attack happen in Belgium?

The news hit the headlines at the beginning of this week: an unidentified threat actor abused a vulnerability in the temperature controllers of freezers in multiple French supermarkets, causing perishable goods to thaw to the point where they had to be thrown away. In the night of 11 to 12 October, hundreds of stores across Intermarché/Netto, Coopérative U, Carrefour, Monoprix and Leclerc were affected. Could it happen in Belgium? Yes.

Red team vs blue team: what penetration testing really tests

Red team and blue team are borrowed from military wargaming: attackers versus defenders. In cybersecurity, the red team runs authorised attacks, including penetration testing, while the blue team detects and responds. Approach Cyber, formed from the merger of AXS Guard and Approach Cyber, now delivers both.

Why does data sovereignty in Belgium hit a legal catch-22?

True digital sovereignty is not achievable with non-European cloud providers today. US law (the CLOUD Act) and EU law (the GDPR) place conflicting obligations on any American company holding EU data – a legal catch-22 that no amount of infrastructure investment can resolve. Here is why, and what it means for choosing a cybersecurity vendor in Belgium.

Digital sovereignty: what it means for your business

Digital sovereignty is the ability of a country, organisation or individual to control their own data, software and digital infrastructure without depending on the laws or commercial interests of external, often non-European, entities. For businesses, it means knowing where data sits, which laws apply, and who ultimately manages it. Just a few years ago, the term barely appeared in business conversations. Today it comes up constantly, in board meetings, compliance reviews and supplier tenders. This is not a passing trend: it reflects a convergence of geopolitical, legal and technological developments that have gathered pace in recent years.

Why Chaomatic Trusts ITBS and AXS Guard

IT Business Solutions AXS Guard and IT Business Solutions have enjoyed a strong partnership for 20 years. Based on that trust, we interviewed Lionel Simons, CEO of ITBS, to learn his reasons for choosing AXS Guard for his end customers.

MIVAS: A Pioneer in Socio-Economic Entrepreneurship and Information Security

MIVAS is a socio-economic enterprise with over 700 employees, approximately 140 of whom are support staff. The organization provides employment opportunities for people with a distance to the labour market, balancing economic and social goals. This approach benefits both MIVAS’s customers and employees.​

Kinderpostzegels: 25 years on, a children’s charity moves to managed cybersecurity

Kinderpostzegels is a Dutch charity dedicated to empowering children facing life’s challenges. Poverty, loneliness and domestic difficulties can hinder a child’s development, leaving many feeling disadvantaged. Kinderpostzegels is committed to giving these children the support and opportunities they need to thrive, believing every child deserves an equal chance to succeed. Through impactful programmes that foster resilience, encourage critical thinking and empower children to take ownership of their lives, the organisation makes a difference in children’s lives, in the Netherlands and around the world, 365 days a year.

Intersig Gains Peace of Mind with Managed EDR Protection

Intersig ranks among the world’s largest manufacturers of construction steel, known for its focus on high-quality, innovative products and services and a workforce driven by ambition. Sustainable practices are woven into the company’s day-to-day approach.

How Optimum Sorting Connected Its Global Sites Securely

Optimum Sorting develops advanced technological solutions and needs to protect its sensitive business data accordingly.

DO YOU WANT TO GO TO WORK SMILING EVERYDAY?

Find out if we're a match!

At Approach Cyber, we believe everyone deserves digital peace of mind. Inspired by the vision, our mission is to protect our clients’ digital assets, allowing them to focus on what matters most—their business.  

Our purpose is to deliver cyber serenity to society empowering individuals and organisations to navigate the digital world with confidence and trust. If you share our commitment to secure the digital future, we invite you to explore our career opportunities today.

Join us
Explore our services
Ask for an audit
Facebook-f Linkedin-in Youtube