What Cyber Hermes OÜ does

Cyber Hermes OÜ is a privately held, Estonia-incorporated (Tallinn) board-level AI and cyber governance advisory firm that targets corporate directors and boards navigating regulatory pressure under DORA, NIS2, GDPR, the EU AI Act, and SEC examination priorities. The firm is led by Founder Alexander Antukh — a DDN Qualified Technology Expert, Certified in AI Oversight for Corporate Directors, and NACD Certified Corporate Director with an active board-level AI governance practice at a major Asia-Pacific energy group — alongside Co-Founder Gaston Pumar, who leads Risk & Governance Advisory. The firm explicitly positions itself outside the technology vendor, Big Four, and generalist consultancy categories, translating between technical cyber language and board accountability language, and maintains no vendor referral relationships or preferred supplier arrangements.

The core "product" is a proprietary governance methodology and engagement playbook rather than software. Codified deliverables include an AI & Cyber Risk Register, Regulatory Exposure Map, Custom AI Governance Framework, Director Accountability Map, Incident Response Protocol, Governance Evidence Package, Third-Party AI Risk Review, and Board Education materials. Revenue is generated primarily through three tiered subscription programs — Board Compass ($4,500/month), Board Shield ($7,500/month), and Board Architect ($12,000/month), each with a six-month minimum — supplemented by a $2,500 fixed-fee Board Exposure Assessment as a diagnostic entry point, $350/hour advisory access, and standalone engagements (Board Education Workshop, AI Governance Health Check, Regulatory Readiness Review). Go-to-market is a founder-led, enterprise advisory motion: a free 60-minute discovery conversation via Calendly, a tailored proposal within five business days, and remote delivery with on-site availability for higher tiers, supported by referral flow from a founding Advisory Board being assembled in 2026.

The operating model is deliberately small: 1–10 employees, bootstrapped with no disclosed external funding, founder-owned, and serving what the firm describes as a deliberately limited client list across Europe, North America, and Asia-Pacific. Independence from technology and vendor economics is a stated core principle, and the firm has no disclosed M&A, partnership, or distribution arrangements beyond its Advisory Board referral network.

Name

Cyber Hermes OÜ

Legal name

Cyber Hermes OÜ

Website

https://cyberhermes.com

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

1–10 employees

Short description

Cyber Hermes OÜ is an Estonia-based advisory firm providing board-level AI and cyber governance services to enterprise directors navigating regulatory pressure under DORA, NIS2, GDPR, the EU AI Act, and SEC examination priorities, delivered through tiered subscription retainers and structured diagnostic engagements by a two-founder team.

Ownership category

akta.pro rank

Product category

Board-level AI & Cyber Governance Advisory

NAICS

Management Consulting Services (54161), Management, Scientific, and Technical Consulting Services (5416)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Governance & Board Effectiveness Advisory (BPAHAFAC)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Cybersecurity & Identity Consulting (BPAHAEAG), Governance & Board Reporting (Metrics, KRIs/KPIs) (HDADAIAL)

Keywords

• Board-level AI advisory
• Cyber governance advisory
• AI risk oversight
• Regulatory compliance advisory
• Director accountability services

Headquarters

HQ city

Tallinn

HQ country

Estonia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Board Compass (Tier 01): Monthly subscription advisory service at $4,500/month with 6-month minimum ($27,000 total). Includes AI & Cyber Risk Register, Regulatory Exposure Map, Quarterly Board Check-in Session, Monthly Advisory Briefing, Async Advisory Access, and Governance Readiness Report.
2. Board Shield (Tier 02): Monthly subscription advisory service at $7,500/month with 6-month minimum ($45,000 total). Includes everything in Board Compass plus Board Meeting Participation, Custom AI Governance Framework, Incident Response Protocol, Governance Evidence Package, AI Incident Tabletop Exercise, and Priority Advisory Access.
3. Board Architect (Tier 03): Monthly subscription advisory service at $12,000/month with 6-month minimum ($72,000 total). Includes everything in Board Shield plus Full Governance Program Design, Board Education Session, Regulatory Compliance Roadmap, Third-Party AI Risk Review, Reserved Weekly Advisory Hours (2 hours/week), and Engagement Closeout delivering eight governance documents.
4. Board Exposure Assessment: Fixed-scope, one-time engagement at $2,500. Two-week diagnostic mapping board's AI and cyber risk with board-ready report. Includes AI risk landscape mapping, Director accountability gap analysis, Regulatory exposure snapshot, Board-ready report + presentation, Prioritized governance recommendations, Optional 60-min debrief.
5. Hourly Advisory: Direct access to advisor for specific board-level questions, second opinions, or decision support at $350/hour. Urgency fee may apply. Available without a retainer.
6. Standalone Engagements: Board Education Workshop, AI Governance Health Check, and Regulatory Readiness Review available as standalone project-based engagements with fixed fees scoped on enquiry.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Cyber Hermes OÜ is a specialist board-level AI and cyber governance advisory firm that translates between technical cybersecurity expertise and board-level governance accountability. It sells three tiered monthly subscription advisory programs — Board Compass ($4,500/mo), Board Shield ($7,500/mo), and Board Architect ($12,000/mo), each with a 6-month minimum — alongside a fixed-fee $2,500 Board Exposure Assessment diagnostic, standalone project-based engagements (Board Education Workshop, AI Governance Health Check, Regulatory Readiness Review), and $350/hour ad-hoc advisory access.

Product overview

Cyber Hermes OÜ is an advisory services firm offering three tiered service programs (Board Compass, Board Shield, and Board Architect) that build progressively on each other to provide board-level AI and cyber governance advisory. Board Compass is the foundational tier providing governance tools and advisory briefings; Board Shield adds active board meeting participation and incident response capabilities; Board Architect delivers complete, independent governance programs. The company also offers a fixed-scope Board Exposure Assessment as an entry point and standalone services including Board Education Workshop, AI Governance Health Check, Regulatory Readiness Review, and Hourly Advisory.

Differentiator

Problem solved

Functional benefit

Products and services

• Board Compass Tier 01 advisory subscription for corporate boards and directors covering AI and cyber governance foundations, including AI & Cyber Risk Register, Regulatory Exposure Map, Quarterly Board Check-in Session, Monthly Advisory Briefing, Async Advisory Access, and Governance Readiness Report; 6-month minimum at $4,500/month ($27,000 total), delivered remotely.
• Board Shield Tier 02 subscription for organizations under regulatory or AI risk pressure, building on Board Compass with Board Meeting Participation (up to 2 per quarter), Custom AI Governance Framework, Incident Response Protocol, Governance Evidence Package, AI Incident Tabletop Exercise, and Priority Advisory Access; 6-month minimum at $7,500/month ($45,000 total), remote with on-site on request.
• Board Architect Tier 03 subscription for boards that will operate their governance program independently, building on Board Shield with Full Governance Program Design, Board Education Session, Regulatory Compliance Roadmap, Third-Party AI Risk Review (up to 8 vendor relationships), Reserved Weekly Advisory Hours (2 hours/week), and Engagement Closeout delivering eight governance documents; 6-month minimum at $12,000/month ($72,000 total), remote with on-site available.
• Board Exposure Assessment Fixed-scope, two-week diagnostic mapping a board's AI and cyber risk and producing a board-ready report; includes AI risk landscape mapping, Director accountability gap analysis, Regulatory exposure snapshot, board-ready report and presentation, prioritized governance recommendations, and optional 60-minute board debrief; priced at $2,500 one-time, available without an ongoing retainer.
• Board Education Workshop Focused standalone workshop session for directors on AI and cyber governance responsibilities, mapped to sector, regulatory context, and board maturity level; available as a project-based engagement with fixed fee scoped on enquiry, delivered remote with on-site options.
• AI Governance Health Check Standalone focused review of an organization's existing AI governance documentation assessed against current regulatory expectations and best practice; available as a project-based engagement with fixed fee scoped on enquiry.
• Regulatory Readiness Review Standalone structured review of board posture against specific regulatory frameworks (SEC requirements, DORA, EU AI Act, NIS2) producing a prioritized gap analysis; available as a project-based engagement with fixed fee scoped on enquiry.
• Hourly Advisory On-demand direct advisor access for specific board-level questions, second opinions, or decision support without requiring a retainer; priced at $350/hour with possible urgency fee, available on a pay-as-you-go basis.

Quantifiable outcome

• 62% of directors now discuss AI at board level — yet most have no governance framework to act on it
• +2 more outcomes

Segments2 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Scale indicators3 records

Recent moves4 records

Expansion highlights5 records

Broad incumbents

• Ankura Consulting (Cyber Risk & Compliance): Global advisory with a dedicated cyber risk, privacy, and compliance practice. Comparable because it serves boards and general counsel on regulatory readiness, incident response, and governance — overlapping use cases with Cyber Hermes' tiered advisory.
• FTI Consulting (Technology & Cyber Risk): Global advisory firm with a Technology and Cyber Risk segment serving boards, regulators, and legal counsel. Comparable as a high-end advisory addressing board accountability, regulatory exposure, and incident response — competing for similar enterprise mandates.
• Optiv Security: Large cybersecurity solutions and advisory provider. Comparable as an enterprise cyber advisory covering governance, risk, and compliance programs that often extend to board-level reporting and regulatory readiness.
• Mandiant (Google Cloud): Global cybersecurity advisory and incident response firm now part of Google Cloud. Comparable as a high-end cyber advisory serving enterprise boards and CISOs, with overlapping board-level cyber risk and incident response advisory offerings.
• Kroll (Cyber Risk practice): Global risk consultancy with a dedicated Cyber Risk practice serving boards, general counsel, and D&O insurers. Comparable because it addresses director accountability, cyber governance, and incident response at the board level across jurisdictions.
• Diligent (Galvanize/Board & Risk): Board governance software and GRC platform. Comparable because it serves corporate boards with governance, risk, and compliance tooling that overlaps with Cyber Hermes' AI Governance and Cyber Risk Register offerings, though as SaaS rather than advisory.

Direct peers

• Holistic AI: AI governance, risk, and compliance platform serving enterprises and boards. Comparable because it also targets the board-level AI accountability gap with governance frameworks, though delivered as SaaS rather than pure advisory.

Others

• NACD (National Association of Corporate Directors): Director education and certification body whose NACD Directorship Certification is held by the founder. Comparable as the canonical credentialing and education ecosystem for corporate directors navigating governance obligations like those Cyber Hermes advises on.
• Director Cyber Network (DDN): Network and certification body for directors with cyber and technology expertise. Comparable as the source of the DDN Qualified Technology Expert certification and as a referral ecosystem for board-level cyber advisory engagements.

Emerging players

• Credo AI: AI governance platform for enterprises. Comparable as a specialist AI governance vendor addressing similar regulatory drivers (EU AI Act, NIST AI RMF) and overlapping with Cyber Hermes' Governance Evidence Package and risk register offerings.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/cyberhermescom
• LinkedInlinkedin.com/company/cyberhermes

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber Hermes OÜ