Nordic Financial CERT

What Nordic Financial CERT does

Nordic Financial CERT (NFCERT) is a member-driven non-profit organization headquartered in Oslo, Norway, that delivers collaborative cybersecurity and financial-crime-prevention services to the Nordic financial sector. Founded in 2013 as FinansCERT and rebranded to its current Nordic-wide scope in 2017, NFCERT serves more than 200 licensed banks, insurance companies, payment providers, financial infrastructure operators, and central-bank-adjacent entities across Denmark, Finland, Iceland, Norway, and Sweden. It holds designated Sector Incident Response Team status for the Norwegian and Danish financial sectors and positions its community participation as a means for members to meet DORA Article 45 obligations.

NFCERT's product portfolio is organized around four service areas: a Trusted Community (member calls, events, and the annual conference), Threat Intelligence (reports, insights, feeds and alerts tailored to the Nordic financial sector), Incident Analysis & Coordination (threat analysis and disruption support), and Data Sharing & Tools. The latter includes the Phishing Factory anti-phishing platform and the Mule Sharing Platform, one of only seven globally that enables cross-border fraud data sharing; in 2026 this is being extended via the Nordic Data-Sharing Platform pilot beyond IBANs to include names and national identification numbers, aligned with the EU Payment Services Regulation. Members access services through a secure portal at apps.nfcert.org and interact with NFCERT via dedicated relationship management.

The operating model is a closed community with annual, size-tiered membership dues paid by every member, no public pricing, and a Board of Directors drawn from member institutions (currently chaired by Erik Melgaard of Sydbank with Anders Hardangen of DNB as Vice Chair). A 12-person team led by General Manager Morten Drægni runs operations; a 2025 Board-defined strategy has expanded the mandate from pure cyber defense into Financial Crime Prevention and a Nordic Data Sharing Hub, accompanied by a 2026 member-portal modernization, brand refresh, and Helsinki-based annual conference.

Name

Nordic Financial CERT

Legal name

Nordic Financial CERT

Website

https://nfcert.org

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

Nordic Financial CERT is a member-driven, Oslo-based non-profit that provides collaborative cybersecurity and financial-crime-prevention services — threat intelligence, incident coordination, and cross-border fraud data sharing — to over 200 banks, insurers, payment providers, and infrastructure operators across the five Nordic countries.

Ownership category

akta.pro rank

Product category

Financial Sector Cybersecurity Services

akta.pro primary industry

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• Financial sector cybersecurity
• Threat intelligence sharing
• Incident coordination services
• Fraud data sharing
• Cyber defense community

Headquarters

HQ city

Oslo

HQ country

Norway

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Annual Membership Fees: NFCERT is a non-profit organization governed and funded by its members. All members pay an annual membership fee according to their size. This is the primary revenue stream supporting the organization's operations and service delivery.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

NFCERT is a member-driven non-profit that delivers cybersecurity and financial crime prevention services to licensed Nordic financial institutions. Its core offering is a unified service platform spanning a trusted member community, tailored threat intelligence, incident analysis and coordination, and secure data-sharing tools (including the Mule Sharing Platform for cross-border fraud data and the Phishing Factory tool). Members access all capabilities through a single integration point and an annual membership fee.

Product overview

Nordic Financial CERT (NFCERT) is a collaborative, member-driven nonprofit organization offering a unified platform of cybersecurity and financial crime prevention services for the Nordic financial sector. The core portfolio comprises four interconnected service areas: Trusted Community (member network for collaboration), Threat Intelligence (reports, insights, and feeds), Incident Analysis & Coordination (threat analysis and disruption support), and Data Sharing & Tools (secure platforms including the Mule Sharing Platform and Phishing Factory). NFCERT also produces annual research publications including the Cyber Threat Landscape Report. Members access all services through a single integration point.

Differentiator

Problem solved

Functional benefit

Products and services

• Trusted Community Trusted member network fostering collaboration, mutual support and knowledge sharing among Nordic financial institutions through member calls and community events. Targeted at licensed Nordic financial services members.
• Threat Intelligence Timely and actionable threat intelligence tailored to the Nordic financial sector, including Threat Intelligence Reports, Threat Insights, and Threat Feeds & Alerts. Targeted at Nordic financial institutions' security and fraud teams.
• Incident Analysis & Coordination Analysis and coordination services among members and external parties when incidents occur, including Threat Analysis and Coordination & Disruption services. Targeted at member financial institutions facing cyber or financial crime incidents.
• Data Sharing & Tools Secure data-sharing platform, self-service tools, vendor access, and Phishing Factory tool for combating financial crime and cyber threats across the Nordic financial sector. Targeted at member financial institutions.
• Mule Sharing Platform One of only seven data-sharing platforms globally that enables cross-border fraud data sharing. Expanding to include names and national identification numbers beyond IBANs. Targeted at Nordic financial institutions for mule account fraud data sharing.
• Nordic Data-Sharing Platform Nordic data-sharing platform for financial crime prevention that enables sharing beyond IBANs to include names and national identification numbers. Aligned with Payment Services Regulation and European initiatives. Targeted at Nordic financial institutions including pilot partners DNB, Nordea, Eika, SpareBank 1, and Sparebanken Norge.
• NFCERT Cyber Threat Landscape Report Annual comprehensive research report analyzing cyber threats facing the Nordic financial sector, covering ransomware, nation-state actors, insider threats, and supply chain risks. Targeted at Nordic financial institutions, regulators and media.

Quantifiable outcome

• 200+ members across all five Nordic countries
• +2 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• DNBcoreStrategic or Co-development PartnerNorwegian bank participating as pilot partner in NFCERT's Nordic data-sharing platform expansion beyond IBANs to include names and national identification numbers. DNB is also represented on the Board of Directors.
• NordeacoreStrategic or Co-development PartnerMajor Nordic bank participating as pilot partner in NFCERT's Nordic data-sharing platform. Nordea is also represented on the Board of Directors.
• EikacoreStrategic or Co-development PartnerNorwegian banking group participating as pilot partner in NFCERT's Nordic data-sharing platform expansion.
• SpareBank 1coreStrategic or Co-development PartnerNorwegian banking alliance participating as pilot partner in NFCERT's Nordic data-sharing platform expansion. SpareBank 1 is also represented on the Board of Directors.
• Sparebanken NorgecoreStrategic or Co-development PartnerNorwegian savings bank participating as pilot partner in NFCERT's Nordic data-sharing platform expansion.
• Government and Law EnforcementcoreStrategic or Co-development PartnerPublic-private partnership with government agencies, police, and national CERTs for cyber defense and financial crime prevention coordination.
• Financial Supervisory AgenciescoreStrategic or Co-development PartnerCollaboration with Financial Supervisory Agencies (FSAs) across Nordic countries for regulatory alignment and sector coordination.
• OP Financial GroupminorStrategic or Co-development PartnerFinnish financial group that hosted the NFCERT Annual Conference 2026 at their headquarters in Helsinki.
• National Cyber Security CentrescoreStrategic or Co-development PartnerPartnership with national cyber security centres across the Nordics for threat intelligence sharing and coordinated defense.

Scale indicators4 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• FS-ISAC: The Financial Services Information Sharing and Analysis Center is the global ISAC for financial services. Most directly comparable to NFCERT in mission, member-driven structure, and threat intelligence sharing model, though operating globally rather than regionally to financial institutions.
• ISAC Norway: Norwegian national ISAC providing threat intelligence sharing across multiple sectors. NFCERT works closely with ISAC Norway; both share the member-driven information sharing model, though ISAC Norway has broader multi-sector scope beyond financial services.
• NCSC-NO (Norwegian National Security Authority): Norwegian national CERT (NorCERT) and cybersecurity authority housed within NSM. NFCERT works closely with NSM; comparable in coordinating cyber defense, though NSM has a broader government mandate covering all sectors and national security.
• CERT-EU: Computer Emergency Response Team for EU institutions, governments, and agencies. Comparable in structure as a CERT serving a defined constituency, though serving EU institutional rather than private sector financial industry needs.

Regional players

• Stichting NL Financial CERT: Dutch financial sector CERT providing threat intelligence and incident coordination for Dutch financial institutions. Direct regional equivalent of NFCERT in another European country with similar member-driven non-profit model focused on financial sector.
• UK Finance: UK trade association for financial services with significant cybersecurity coordination role. Provides threat intelligence and incident response support for UK financial institutions, comparable in mission to NFCERT though broader scope covering policy and advocacy.

Broad incumbents

• Mandiant (Google Cloud): Global leader in threat intelligence and incident response, now part of Google Cloud. While commercial rather than member-driven, Mandiant serves overlapping function for financial institutions seeking threat intelligence and incident response services across many sectors.
• Recorded Future: Leading commercial threat intelligence platform serving enterprises including financial institutions. Comparable in delivering actionable threat intelligence, though operating as a commercial vendor rather than as a member-driven community.

Others

• FIRST (Forum of Incident Response and Security Teams): Global coordination body for CSIRTs and incident response teams. NFCERT participates in FIRST as an ecosystem coordinator enabling collaboration, standards, and best practice sharing across the global incident response community.
• ENISA (European Union Agency for Cybersecurity): European Union Agency for Cybersecurity. Works with NFCERT and similar sectoral CERTs across Europe; relevant as policy and ecosystem enabler shaping EU cybersecurity standards, regulations, and pan-European cooperation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/nfcert

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Nordic Financial CERT