What CSIRT.SK does

CSIRT.SK (also known as VJCSIRT or Vládny CERT) is the national Computer Security Incident Response Team of the Slovak Republic, operating as a dedicated section within the Section for Cyber Security of the Ministry of Investments, Regional Development and Informatization (MIRRI). It is a government state entity headquartered in Bratislava (Pribinova 25) with a secondary office in Košice, wholly owned and controlled by the Slovak government. The organization's mandate is to coordinate national-level response to computer security incidents, monitor and report on global and domestic cybersecurity threats, and serve as the authoritative source of vulnerability and threat intelligence for Slovak entities.

The service portfolio spans reactive and proactive functions. Core operational services include a secure incident reporting channel, a vulnerability disclosure channel, the Hermes early warning system for cyber threats, and an integration of the Have I Been Pwned breach-verification service for citizens and organizations. The organization also operates a suite of training and exercise platforms — Kyberaréna, Achilles, Ares, Afrodita, and a cybersecurity awareness game — to develop incident-response and cyber-defense skills among professionals and the public. Recurring public deliverables include monthly critical vulnerability overviews (continuously published since October 2014) and monthly cybersecurity situational reports covering Slovak and global events (since August 2018).

Because CSIRT.SK is a state entity, it has no commercial revenue model: all services — incident reporting, vulnerability reporting, threat warnings, security advisories, and breach-verification — are provided free of charge to public-sector organizations, critical infrastructure operators, businesses, and citizens. Distribution is conducted through the official website (csirt.gov.sk), a Central Cyber Security Portal (kyberportal.slovensko.sk), and social media channels (Facebook, LinkedIn, X / Twitter, RSS). The entity holds accredited membership in Trusted Introducer and FIRST and maintains a collaborative relationship with ENISA, embedding it in the European and global CSIRT community.

Name

CSIRT.SK

Legal name

CSIRT.SK (Vládny počítačový bezpečnostný incident Response Team, VJCSIRT)

Website

https://csirt.gov.sk

Company type

Private

Operating status

Operating

Short description

CSIRT.SK is the Slovak Republic's national Computer Security Incident Response Team, operating under MIRRI. It coordinates cybersecurity incident response, publishes vulnerability advisories and monthly reports, runs the Hermes early warning system, and serves government, critical infrastructure, businesses, and citizens free of charge.

Ownership category

akta.pro rank

Headquarters

HQ city

Bratislava

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Distribution channels1 record

Marketing channels5 records

Core offering

CSIRT.SK is Slovakia's national Computer Security Incident Response Team, operating under MIRRI to provide centralized cybersecurity incident handling, vulnerability coordination, threat early warning, and security awareness services. It accepts incident and vulnerability reports, disseminates security advisories, operates the Hermes Early Warning System and the Kyberaréna training platform, and provides breach-lookup capabilities to government, critical infrastructure, and the public. All services are delivered free of charge as a public mandate.

Product overview

CSIRT.SK (Computer Security Incident Response Team Slovakia) is the national cybersecurity unit operating under the Ministry of Investments, Regional Development and Informatization of the Slovak Republic. The organization provides a unified platform of cybersecurity services including incident reporting and response coordination, vulnerability disclosure handling, early warning systems (Hermes), and security breach verification (Have I Been Pwned). Additionally, CSIRT.SK operates multiple training and education platforms (Kyberaréna, Achilles, Ares, Afrodita, Cybersecurity Game) for developing cyber defense skills among professionals and the public. The team publishes monthly security reports and critical vulnerability overviews documenting the state of cybersecurity in Slovakia and globally. CSIRT.SK also maintains a Central Cyber Security Portal (Kyberportal) providing access to national cybersecurity resources.

Differentiator

Problem solved

Functional benefit

Products and services

• Incident Reporting Service Centralized channel for reporting cybersecurity incidents to Slovakia's national CSIRT, available to government institutions, critical infrastructure operators, and the general public for coordinated incident handling and response.
• Vulnerability Reporting Service Coordinated vulnerability disclosure service enabling security researchers and affected parties to report security vulnerabilities to CSIRT.SK for triage, validation, and coordinated disclosure with affected Slovak entities.
• Hermes Early Warning System Proprietary early warning system delivering threat intelligence and proactive alerts about emerging cyber threats to Slovak constituents, supporting preventive defense across government and critical infrastructure.
• Have I Been Pwned Breach Lookup Public breach-exposure lookup service integrated into the CSIRT.SK website, allowing Slovak citizens and organizations to check whether their credentials have appeared in known data breaches.
• Kyberaréna (Cyber Arena) Cybersecurity training and awareness platform delivering educational content, exercises, and interactive learning to raise cyber resilience across Slovak government, critical infrastructure, and the public.
• Achilles Platform Named operational platform maintained by CSIRT.SK as part of its national cybersecurity service portfolio.
• Ares Platform Named operational platform maintained by CSIRT.SK as part of its national cybersecurity service portfolio.
• Afrodita Platform Named operational platform maintained by CSIRT.SK as part of its national cybersecurity service portfolio.
• Security Advisories Distribution Continuous publication of security advisories, alerts, and threat intelligence to inform Slovak constituents about current vulnerabilities, threats, and recommended mitigations.

Quantifiable outcome

• Monthly cybersecurity reports covering Slovak and global security events published regularly since August 2018
• +1 more outcomes

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Trusted IntroducercoreOthersCSIRT.SK is certified by Trusted Introducer, a European network of security and response teams that provides accreditation and fosters cooperation between CSIRTs worldwide.
• FIRST (Forum of Incident Response and Security Teams)coreOthersMember of FIRST, a global consortium of computer security response teams that facilitates coordination and cooperation on security incidents.
• ENISA (European Union Agency for Cybersecurity)coreStrategic or Co-development PartnerCollaborates with ENISA, the EU cybersecurity agency, on cybersecurity awareness campaigns (such as Cybersecurity Month) and information sharing.
• Ministry of Investments, Regional Development and Informatization of the Slovak Republic (MIRRI)coreOthersCSIRT.SK operates as a section within MIRRI, the Slovak Ministry responsible for digital transformation and cybersecurity policy.
• CERT.org (Carnegie Mellon University CERT)minorStrategic or Co-development PartnerListed as a reference partner in cybersecurity best practices and incident response methodologies.
• Kyberportal.slovensko.sk (Central Cyber Portal)coreStrategic or Co-development PartnerCentral cyber security portal serving as the main entry point for cybersecurity services and information in Slovakia.

Recent moves6 records

Expansion highlights4 records

Others

• Mandiant (Google Cloud): Leading commercial incident response and threat intelligence firm. While not a direct competitor to CSIRT.SK's government mandate, Mandiant offers overlapping capabilities (incident response, breach verification, vulnerability advisories) to commercial and public-sector clients, making it an adjacent reference point for incident response market structure.
• FIRST (Forum of Incident Response and Security Teams): The global consortium of CSIRTs of which CSIRT.SK is a member. FIRST provides the standards, training, and peer coordination framework that shapes CSIRT.SK's operating model, making it a key ecosystem enabler rather than a direct competitor.

Broad incumbents

• ENISA (European Union Agency for Cybersecurity): The EU-level cybersecurity agency that CSIRT.SK already collaborates with on awareness campaigns. ENISA sets pan-European standards, coordinates the CSIRT Network, and provides a broader institutional reference point compared to the single-country scope of CSIRT.SK.
• ANSSI (France): France's national cybersecurity agency (ANSSI), offering a comparable mandate to CSIRT.SK but at substantially greater scale, broader regulatory authority, and operational footprint covering defense, industry, and critical infrastructure protection.
• NCSC (UK - National Cyber Security Centre): The UK's national cybersecurity authority, a much larger and broader-scope counterpart of CSIRT.SK. While CSIRT.SK focuses on incident coordination, the NCSC operates a wider portfolio including national defense, active threat operations, and critical infrastructure protection at a far greater scale.

Direct peers

• CERT.PL (Poland): Polish national CERT (NASK), a closely analogous Central/Eastern European national CSIRT providing incident response, vulnerability reporting, and threat intelligence to government, businesses, and citizens in Poland with the same mandate structure as CSIRT.SK.
• CIRCL (Computer Incident Response Center Luxembourg): Luxembourg's national CERT operating under the same government-mandated model as CSIRT.SK, providing incident response, vulnerability disclosure, MISP threat-sharing platform, and cybersecurity advisories to a single EU country's constituency.
• CERT.at (Austria): Austrian national CERT operated as a non-profit under government charter, performing the same core functions as CSIRT.SK—incident coordination, early warning, vulnerability disclosure handling, and public advisories for a single EU country with a comparable institutional structure.
• CSIRT.CZ (Czech Republic): National CSIRT of the Czech Republic, directly comparable to CSIRT.SK as a neighboring Central European government-mandated incident response team providing advisories, vulnerability coordination, and public sector cybersecurity services. Both serve similar customer bases (government, critical infrastructure, citizens) with similar operating models.
• CERT-EE (Estonia): Estonian national CERT, a directly comparable single-country CSIRT providing incident coordination, vulnerability advisories, and cybersecurity awareness services. Notable for its high digital-maturity context that mirrors the kind of national-coordination role CSIRT.SK plays in Slovakia.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat3 records

Customer concentration

• Xx.com/csirt_sk
• Facebookfacebook.com/VJCSIRT/?locale=sk_SK
• LinkedInsk.linkedin.com/company/csirt-sk

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CSIRT.SK