NBIP

What NBIP does

NBIP (Stichting NBIP, Nationale Beheersorganisatie Internet Providers) is a Dutch non-profit foundation headquartered in Bunnik, established in 2001 by six ISPs initially to handle wiretap orders under the Dutch Telecommunications Act. Over 25 years it has expanded into a collective cybersecurity and regulatory-compliance provider for digital infrastructure operators, organized around three core platforms: NaWas, a collectively operated DDoS mitigation service routing traffic through European internet exchanges (BNIX, ERA-IX) with sFlow/Splitflow and GRE handoff capabilities; Tapdienst, a lawful interception and disclosure (LI/LD) processing service handling requests from public authorities on behalf of participants; and Clean Networks, a threat-intelligence and abuse-combatting platform paired with a code of conduct and certification label.

The organization operates a membership-based, community-led go-to-market model: digital infrastructure providers — ISPs, hosting and cloud providers, VoIP providers, and other digital service companies — become participants and gain access to the shared services in exchange for membership fees. By the end of 2025 NBIP served over 194 participants, with 131 on NaWas and 107 on Tapdienst (44 using both), spanning approximately 10 European countries. Revenue mechanics are subscription/recurring via participant dues; NBIP is funded by these fees rather than equity capital, and operates with over 20 staff under a director (Octavia de Weerdt) and a foundation board.

The product roadmap is anchored to regulatory tailwinds and European sovereignty themes: NBIP is preparing participants for the EU eEvidence regime (effective 18 August 2026) via an enhanced Tapdienst portal, is co-developing the Connect2Data project with Connect2Trust and SIDN Fund to automate technical-data collection for NIS-2/Cbw compliance, and has launched Haven, an open, supplier-independent cloud-services solution positioned within the pGDI/National Digital Structure. Strategic alliances with regulators (NCSC, RDI) and industry bodies (DINL, Dutch Cloud Community, SIDN) extend its role as a Dutch sector coordinator for cybersecurity and digital autonomy.

Name

NBIP

Legal name

Stichting NBIP

Website

https://nbip.nl

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

11–50 employees

Short description

NBIP is a Dutch non-profit foundation, founded in 2001, that provides collective cybersecurity and regulatory-compliance services — NaWas DDoS mitigation, Tapdienst lawful interception, and Clean Networks threat intelligence — to over 194 digital infrastructure providers across 10 European countries via a membership model.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)

akta.pro primary industry

Network Detection & Response (NDR) (HDADABAI)

Keywords

• DDoS mitigation service
• Threat intelligence platform
• Lawful interception compliance
• Collective cybersecurity services
• Network infrastructure protection

Headquarters

HQ city

Bunnik

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Others

Revenue model

1. Membership/Participant Fees: NBIP operates as a non-profit organization funded through membership fees from participants. Digital infrastructure providers pay to access collective services including NaWas (DDoS protection), Tapdienst (lawful interception), and Clean Networks (threat intelligence).

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

NBIP is a Dutch non-profit foundation that helps digital infrastructure providers cover specific legal obligations and operational risks through three collective cybersecurity platforms: NaWas for collective DDoS protection and mitigation serving nearly 200 participants across 10 European countries; Tapdienst for handling lawful interception and disclosure (tapplicht) requests under the Dutch Telecommunications Act; and Clean Networks for threat intelligence and online abuse combatting with a code-of-conduct certification program.

Product overview

NBIP (Nationale Beheersorganisatie Internet Providers) is a foundation that helps digital infrastructure providers cover specific legal obligations and operational risks through joint cybersecurity services, knowledge sharing, and intensive collaboration with public and private partners. The core offerings consist of three main services: (1) NaWas for collective DDoS protection and mitigation serving nearly 200 participants across 10 European countries; (2) Tapdienst (Lawful Interception & Disclosure) handling wiretap obligations for over 100 providers; and (3) Clean Networks providing threat intelligence and abuse combatting with a certification programme. Additional services include eEvidence compliance support and the Connect2Data project for automated threat intelligence data collection. NBIP also participates in European projects including IPCEI-CIS and initiatives related to digital autonomy.

Differentiator

Problem solved

Functional benefit

Brands

• NaWas: Collective DDoS protection service for digital infrastructure providers
• Tapdienst
• Clean Networks

Products and services

• NaWas (Nationale Wasstraat) Collective DDoS protection service using centrally managed advanced anti-DDoS equipment with engineers monitoring for the latest attack types. Serves nearly 200 hosting and cloud providers, VoIP providers, internet access providers, and other digital service providers across 10 European countries (Netherlands, Belgium, UK, Germany, Austria, Switzerland, Italy, Nordics, Denmark). Includes sFlow/Splitflow functionality and optional GRE clean-traffic handoff for participants not connected to internet exchanges.
• Tapdienst (Lawful Interception & Disclosure) Service that handles the operational work related to lawful interception (tapplicht) and disclosure obligations under the Dutch Telecommunications Act on behalf of public electronic communications service providers. Includes a portal for receiving, checking, and processing LD requests, with preparations for European eEvidence orders from 18 August 2026. By end of 2025, 107 organisations participated in the Tapdienst.
• Clean Networks Threat intelligence platform for combating online abuse in the Dutch internet sector. Participants sign the Code of Conduct for Abuse Combatting and receive extensive information about vulnerabilities and abuse. Provides the Clean Networks label/certificate demonstrating active efforts to detect and combat vulnerabilities, helping participants build a strong brand and remain compliant.
• eEvidence Compliance Support Support service for preparing digital infrastructure providers for European eEvidence legislation. The Tapdienst portal was expanded to process both lawful interception/disclosure requests and incoming eEvidence orders from EU Member States from 18 August 2026 onwards, leveraging NBIP's 25 years of experience with lawful interception and disclosure.
• Connect2Data Collaborative project with Connect2Trust and SIDN Fund to significantly simplify the collection of technical data (IP addresses, domain names) needed to receive tailored threat information. Helps organisations collect data more easily, independently, and automatically from their own systems using open-source tools, enabling more accurate threat alerts and compliance with NIS-2/Cbw registration obligations.

Quantifiable outcome

• Over 2,700 DDoS attacks mitigated in Q1 2026 alone
• +2 more outcomes

Named customers4 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

Feature3 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Connect2TrustcoreStrategic or Co-development Partner · 9 September 2025Joint project called Connect2Data with Connect2Trust and SIDN Fund to simplify collection of technical data needed for threat information. More than 3,000 organizations already receive vulnerability and abuse reports from Connect2Trust and NBIP.
• Digitale Infrastructuur Nederland (DINL)coreStrategic or Co-development Partner · 27 May 2025Coalition formed with DINL, Intermax, Solvinity, Dutch Cloud Community, NorthC Datacenters, Centric, SLTN, and Uniserver to present a three-layer model for strengthening Dutch digital autonomy in government cloud policy.
• BNIX (Belgian Internet Exchange)coreTechnology or Integration · 26 November 2024BNIX, the Belgian internet hub, partnered with NaWas to make DDoS protection available to Belgian ISPs, hosting providers, and content providers. Through a private VLAN connection, BNIX participants can access NaWas services for enhanced protection against DDoS attacks.
• EVE Compliancy SolutionsminorImplementation/ SI/ Consulting PartnerPartner for the Tapdienst (Lawful Interception) service, supporting automation and additional intelligence features. EVE CEO Mark Lastdrager spoke at NBIP NEXT about developments in LI and LD.
• National Cyber Security Centre (NCSC)coreStrategic or Co-development PartnerNBIP collaborates with NCSC for threat information sharing. The Connect2Data project is intended for organizations receiving threat information from NCSC or through intermediaries such as Connect2Trust and NBIP.
• Rijksinspectie Digitale Infrastructuur (RDI)coreStrategic or Co-development PartnerRDI is responsible for monitoring telecommunications and IT networks and ensuring security and reliability. They inspect compliance with the Telecommunications Data Security Decree (Bbgt) and work with NBIP on lawful interception compliance.

Scale indicators7 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• AMS-IX (Amsterdam Internet Exchange): Largest Dutch internet exchange with adjacent DDoS and peering services. Comparable as a Dutch/European network infrastructure player serving ISPs and hosting providers, though broader in scope than NBIP.
• Akamai Technologies: Global CDN and security vendor with extensive DDoS and network protection offerings. Comparable as an incumbent DDoS protection provider competing commercially with NaWas for large hosting and cloud customers.
• Cloudflare: Global hyperscaler providing DDoS protection, CDN, and security as services. Comparable as a massive-scale DDoS mitigation platform competing for the same ISP/hosting-provider security budgets as NaWas.

Direct peers

• EVE Compliancy Solutions: Dutch vendor automating lawful-interception and disclosure workflows. Listed as NBIP's Tapdienst implementation partner; comparable because it builds LI/LD tooling integrated into the same regulatory workflows NBIP operates.
• SURF: Collaborative organization for Dutch education and research institutions providing shared IT services including networking and security. Comparable to NBIP in non-profit member-cooperative model delivering shared digital infrastructure and cybersecurity.
• NL-IX (Neutral Internet Exchange): Internet exchange and DDoS scrubbing operator serving European ISPs and hosting providers. Comparable to NBIP's NaWas because both offer DDoS mitigation/clean-traffic handoff routed through internet exchange infrastructure.
• SIDN (Stichting Internet Domeinregistratie Nederland): Stichting operating the .nl domain registry. Directly comparable to NBIP as another Dutch non-profit foundation delivering shared, trust-based internet infrastructure services to participants, with similar governance and collaborative ethos.
• DIVD (Dutch Institute for Vulnerability Disclosure): Non-profit foundation coordinating vulnerability disclosure across Dutch and European networks. Comparable to NBIP's Clean Networks because both are member-funded, non-profit cooperative security initiatives tied into NCSC and SIDN Fund.

Regional players

• Belnet: Belgian government-funded internet service provider serving research and public-sector institutions. Comparable as a publicly minded collaborative ISP/security provider in a neighboring jurisdiction; relevant given NBIP's Belgian expansion via BNIX.

Emerging players

• Quova (now part of Akamai / similar IP intelligence providers): Adjacent threat-intelligence and IP/domain data providers. Comparable as suppliers of technical data and threat intelligence feeding into abuse/vulnerability workflows similar to Clean Networks.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about NBIP