What CERT.LV does

CERT.LV is Latvia's national Computer Emergency Response Team and the country's designated Cyber Incident Prevention Institution, operating as a unit within the Latvijas Universitātes Matemātikas un informātikas institūts (University of Latvia Mathematics and Informatics Institute). Founded in 2011 with statutory authority under the National Cybersecurity Law (Nacionālās kiberdrošības likums, NKDL), the institution is the primary governmental coordinator for cyber incident response, vulnerability disclosure, and threat intelligence across Latvian cyberspace. It serves NKDL-subject entities — government institutions, municipalities, and critical infrastructure operators who are legally required to coordinate with CERT.LV — as well as Latvia's private sector and general public.

CERT.LV's product portfolio centers on three pillars: the DNS ugunsmūris (DNS Firewall) co-developed with NIC.LV that blocks malicious domains and phishing sites at the DNS layer for the entire Latvian internet population; the CVD platform (cvd.cert.lv) that systematically coordinates vulnerability reports across government and corporate resources; and recurring threat reporting including monthly Kiberlaikapstākļi (Cyber Weather) reports, quarterly statistics, and security alerts. Supporting infrastructure includes a Security Operations Center (SOC-LV), MISP-based threat intelligence sharing, RPZ blocking lists, and a growing portfolio of subsidiary awareness domains (esidross.lv, kibersahs.lv/cyberchess.lv, cybershock.lv, kibersoks.lv, dnsmuris.lv).

The business model is entirely non-commercial: all core services are provided free of charge and funded through Latvian national budget allocations, EU CEF co-funding, and joint projects with the Ministry of Defence. Revenue mechanics resemble those of a public-sector agency — annual budget cycles, EU grant disbursements, and the newly-approved 2026 Cabinet co-financing for the Nordic-Baltic Cross-Border Cyber-Hub (NBCC) and SOC-LV capacity projects. CERT.LV's go-to-market is community- and mandate-led: public awareness campaigns, free security tools, the annual CyberChess conference, 'Esi drošs' seminars, ISP-mediated alerts, and statutory coordination with NKDL subjects drive adoption of CERT.LV's services rather than commercial sales.

Name

CERT.LV

Legal name

Latvijas Universitātes Matemātikas un informātikas institūta Kiberincidentu novēršanas institūcija CERT.LV

Website

https://cert.lv

Company type

Private

Founded year

2011

Operating status

Operating

Headcount range

1–10 employees

Short description

CERT.LV is Latvia's national Computer Emergency Response Team, delivering free 24/7 incident response, vulnerability disclosure coordination, DNS firewall protection, and threat intelligence reporting to government, critical infrastructure, businesses, and the general public under a statutory NKDL mandate.

Ownership category

akta.pro rank

Product category

National Cybersecurity Incident Response Services

NAICS

Investigation and Security Services (5616), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Vulnerability Management & Penetration Testing Services (BPAEADAD), Exposure Analytics & Risk-Based Prioritization (RBVM) (HDADAHAF)

Keywords

• Cyber incident response
• Vulnerability disclosure coordination
• National CERT services
• DNS firewall protection
• Threat intelligence reporting

Headquarters

HQ city

Riga

HQ country

Latvia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Operations

Revenue model

1. Government Funding: CERT.LV operates as a state-funded institution under the Latvijas Universitātes Matemātikas un informātikas institūts. Operations are financed through national budget allocations and EU funding programs (e.g., CEF, EU Recovery Fund). Services to the public and government entities are provided free of charge.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels9 records

Core offering

CERT.LV is Latvia's national cyber incident prevention and response institution that coordinates national cybersecurity incident handling, operates a free DNS-based firewall (DNS ugunsmūris) to block malicious domains, runs a coordinated vulnerability disclosure (CVD) platform for government and corporate systems, publishes monthly and quarterly threat reports (Kiberlaikapstākļi), issues security alerts and advisories, conducts threat hunting operations, and delivers cybersecurity awareness education and training to government, critical infrastructure, and the Latvian public.

Product overview

CERT.LV is Latvia's Cyber Incident Prevention and Response Institution operated by the Latvian University Mathematics and Information Technology Institute. It provides a coordinated vulnerability disclosure platform (CVD), a DNS firewall service (DNS ugunsmūris), and produces regular cybersecurity reporting including monthly cyber weather reports (Kiberlaikapstākļi), incident statistics, and security alerts. The organization also participates in the global STOP. THINK. CONNECT. cybersecurity awareness initiative. CERT.LV websites include: cert.lv, esidross.lv, cyberchess.lv, kibersahs.lv, cybershock.lv, kibersoks.lv, and dnsmuris.lv.

Differentiator

Problem solved

Functional benefit

Brands

• DNS Ugunsmūris: DNS Firewall service developed by CERT.LV and NIC to protect users from malicious websites
• CVD Platform
• STOP. THINK. CONNECT.

Products and services

• Coordinated Vulnerability Disclosure (CVD) Platform A vulnerability disclosure platform for reporting, registering, and processing vulnerabilities found in Latvian government institutions and companies, enabling systematic communication between reporters and affected organizations.
• DNS ugunsmūris (DNS Firewall) A free DNS-based security tool that blocks malicious domains, fake bank pages, fraudulent trading platforms, and virus-distributing websites, available to individual users and organizations in Latvia.
• Kiberlaikapstākļi (Cyber Weather Reports) Monthly threat intelligence reports summarizing the most significant cyber events in Latvia, categorized across fraud, malware and vulnerabilities, service availability, intrusions and data breaches, and IoT threats.
• Statistika (Incident Statistics) Quarterly and monthly statistics on cyber incidents and threats registered by CERT.LV, including data on compromised devices and incident category breakdowns.
• Brīdinājumi (Security Alerts) Security advisories and warnings about critical vulnerabilities, malware campaigns, and active cyber threats affecting Latvian users and organizations.

Named customers1 record

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

16 partnerships are on record, tiered core, major and minor.

• NIC.LVcoreTechnology or IntegrationCERT.LV and NIC.LV jointly developed and maintain the DNS ugunsmūris (DNS Firewall), a free security tool for individuals and organizations in Latvia that blocks malicious domains and phishing sites. NIC.LV is Latvia's domain name registry operator.
• Aizsardzības ministrija (Ministry of Defence)coreStrategic or Co-development PartnerThe Ministry of Defence is the governing authority for national cybersecurity policy. It co-funds CERT.LV projects (NBCC, SOC-LV) and co-organizes national cybersecurity exercises ('Medus Pods') alongside CERT.LV and the National Armed Forces.
• FIRST (Forum of Incident Response and Security Teams)coreStrategic or Co-development PartnerCERT.LV has been a member of FIRST since 2008. FIRST is a global non-profit association uniting over 800 incident response teams from 110+ countries, enabling international threat intelligence sharing and coordinated incident response.
• TC-CSIRT Trusted IntroducercoreStrategic or Co-development PartnerCERT.LV is accredited through the Trusted Introducer, a European CERT/CSIRT network that evaluates and endorses trusted incident response teams, providing an additional layer of institutional credibility.
• CSIRTs NetworkcoreStrategic or Co-development PartnerCERT.LV participates in the EU CSIRTs Network, which facilitates cross-border cooperation and information sharing among European national CERTs as mandated by NIS2 directive.
• Nacionālie bruņotie spēki (National Armed Forces) and Kiberaizsardzības bataljons (Cyber Defence Battalion)coreStrategic or Co-development PartnerCERT.LV collaborates with the Latvian National Armed Forces and its Cyber Defence Battalion on national cybersecurity exercises ('Medus Pods') and joint threat hunting operations, including international operations with partner countries.
• ENISA (EU Cybersecurity Agency)coreStrategic or Co-development PartnerCERT.LV participates in ENISA-organized exercises (e.g., Cyber Europe 2024) and cooperates on pan-European cybersecurity capacity building initiatives.
• ISACA Latvija nodaļa (ISACA Latvia Chapter)majorStrategic or Co-development PartnerCERT.LV co-organizes the annual CyberChess cybersecurity conference with ISACA Latvia Chapter, bringing together international cybersecurity experts, practitioners, and government stakeholders.
• Valsts policija (State Police of Latvia)majorStrategic or Co-development PartnerCERT.LV collaborates with the State Police on joint public awareness campaigns about cybercrime and fraud (e.g., the #Atkrāpies campaign). The State Police also provides law enforcement data to CERT.LV for threat analysis.
• Latvijas Interneta Asociācija (Latvian Internet Association)coreTechnology or IntegrationThe Latvian Internet Association cooperates with CERT.LV on the 'Responsible Internet Service Provider' initiative to combat virus distribution and illegal content online, coordinating with ISPs on threat notifications and takedowns.
• Drossinternets.lv (Latvian Safer Internet Centre)majorStrategic or Co-development PartnerCERT.LV works with the Latvian Safer Internet Centre (Drossinternets.lv) on reporting illegal online content and coordinating public awareness about internet safety, particularly for children and families.
• LMTmajorStrategic or Co-development PartnerLMT, a major Latvian telecom operator, partners with CERT.LV and Valsts policija on joint public awareness campaigns to alert citizens about ongoing digital fraud and cybercrime threats.
• ICANNminorStrategic or Co-development PartnerCERT.LV and NIC jointly organized an ICANN practical seminar on DNS security and DNSSEC, hosted at CERT.LV facilities in 2025.
• Drošības ekspertu grupa (DEG) — Security Experts GroupmajorStrategic or Co-development PartnerThe Security Experts Group (DEG) is a national cybersecurity expert coordination body associated with CERT.LV, bringing together cybersecurity professionals from across government and industry to share knowledge and respond to national-level threats.
• Digitālās drošības uzraudzības komiteja (Digital Security Oversight Committee)majorStrategic or Co-development PartnerThe Digital Security Oversight Committee is a national coordination body overseeing cybersecurity governance in Latvia, working closely with CERT.LV to implement NKDL requirements and coordinate responses to national-level cyber incidents.
• Latvijas Universitātes Matemātikas un informātikas institūts (MII)coreStrategic or Co-development PartnerCERT.LV operates as a unit within the University of Latvia's Mathematics and Informatics Institute (MII), leveraging academic resources, research capabilities, and institutional infrastructure.

Scale indicators6 records

Recent moves6 records

Expansion highlights5 records

Regional players

• NISIRT (Nordic National CERT — e.g., NorCERT): NorCERT under the Norwegian National Security Authority is a Nordic national CSIRT sharing threat intelligence with Baltic peers via the NBCC and CSIRTs Network — directly engaged as a regional counterpart of CERT.LV.

Others

• ENISA (European Union Agency for Cybersecurity): EU-level coordination body that organises pan-European exercises (e.g., Cyber Europe 2024) and capacity-building programmes in which CERT.LV actively participates — institutional peer rather than direct competitor.
• FIRST (Forum of Incident Response and Security Teams): Global non-profit association of 800+ CERTs from 110+ countries — CERT.LV is a member since 2008, and FIRST serves as the umbrella peer network for intelligence and capability sharing.

Broad incumbents

• BSI (Bundesamt für Sicherheit in der Informationstechnik): Germany's federal cybersecurity authority, the largest national CERT in Europe, broadly analogous to CERT.LV across incident response, advisories, and governance advisory.
• NCSC-UK (National Cyber Security Centre): UK's national cybersecurity authority under GCHQ, performing incident response, CVD coordination, and public advisories — same national CERT role as CERT.LV but at significantly larger scale and broader geographic remit.
• ANSSI (Agence nationale de la sécurité des systèmes d'information): France's national cybersecurity agency operating CSIRT activities, vulnerability disclosure, and regulated baseline security — comparable national CERT role with broader regulatory reach.
• CISA (Cybersecurity and Infrastructure Security Agency): US federal cybersecurity agency providing national-level incident coordination, vulnerability management, and threat advisories — the largest international peer by mandate and resources.

Direct peers

• CERT-EE (Estonian CERT): Estonia's national CERT operating under the Information System Authority (RIA), with parallel mandate for incident coordination, CVD, and national awareness — closest geographic and functional peer.
• CERT.LT (Lithuanian National CERT): Lithuania's national CSIRT under the National Cyber Security Centre, delivering DNS blocklists, CVD, advisories, and IR coordination — directly comparable national CERT function within the same Baltic context.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/certlv
• GitHubgithub.com/cert-lv
• YouTubeyoutube.com/user/CERTLV
• Facebookfacebook.com/certlv

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CERT.LV