Get a Security Assessment
Get a Security Assessment

Curios

Enterprise-grade cybersecurity and compliance. Boutique service, from Belgium.

Last reviewed: October 2026

We're a team of senior security consultants who embed within your organization to strengthen defences from the inside. From penetration testing to compliance certification, from vCISO services to security awareness—we bring enterprise expertise without enterprise overhead. Based in Belgium and operating from Antwerp, trusted across Europe.

Since 2017

Cybersecurity only

Focused on security since day one.

48+

Certifications across the team

Including CISSP, CISM, OSCP, OSCE and eWPT.

CVEs

Published in enterprise software

Hands-on research, not marketing.

EU

Based in Belgium, trusted across Europe

Regulation-native: NIS2, GDPR, ISO 27001, DORA, TISAX.

Trusted By

From Manufacturing to Finance—Securing What Matters

Our clients choose us because we become part of their team. From automotive suppliers requiring TISAX compliance to insurers protecting sensitive customer data, we deliver security expertise that scales with your ambitions.

Our Services

End-to-end security expertise, from assessment to implementation

Curios covers the full security lifecycle from Belgium — assessment, penetration testing, compliance certification, vCISO leadership and awareness — delivered by senior consultants who embed within your organisation and verify the controls themselves.

Security Assessments

Security Assessments

Whole-environment review plus penetration testing of applications, networks and infrastructure.

Cloud Security Assessments

Cloud Security Assessments

Misconfigurations, access-control gaps and compliance issues across AWS, Azure, GCP.

Phishing & Awareness

Phishing & Awareness

Realistic phishing simulations, security awareness training, measurable behaviour change.

TPRM

Third-party risk management (TPRM)

Evaluate, monitor and manage the security posture of critical vendors.

Managed DevSecOps

Managed DevSecOps

Security testing, code review and vulnerability management inside your CI/CD pipeline.

vCISO

vCISO

Board-level security leadership: programme direction, compliance management, business alignment.

Shape

Our Model

How we work

Our 6-Step Engagement Model - finetuned to your unique needs and business goals.

Get in touch
How we do

Understand Your Needs

Collaborative discovery to define your goals and risk.

How we do

Assess Current State

Targeted assessments to uncover security issues.

How we do

Develop a Strategic Plan

Tailored roadmap aligned with your business needs.

How we do

Implement Solutions

Deploy prioritized services like DevSecOps, vCISO, and others.

How we do

Enable Your Team

Train staff, refine processes, and embed a security-first culture.

How we do

Monitor & Improve

Continuously track progress and adapt to evolving threats.

WHY CURIOS

What makes us different

In an increasingly interconnected world, investing in cybersecurity is crucial for business success. It protects sensitive data and systems from cyber threats, helping companies avoid financial losses, downtime, and reputational damage.

Reach out to us

Boutique expertise, enterprise capability

You work directly with senior consultants—not junior staff learning on your dime. Our small, specialized team delivers the expertise of a large firm with the attention and accountability of a trusted partner.

Deep industry specialization

Based in Belgium since 2017, we understand European regulatory requirements from NIS2 to GDPR. Your data stays in trusted hands, with consultants who speak your language—literally and figuratively.

Belgian roots, European reach

In a world of constant threats, businesses that invest in security thrive by building trust, staying compliant, and embracing new technology. Our purpose is to support this journey, rooted in excellence, innovation, integrity, and collaboration.

WHO DOES THE WORK

Experts do the work

The people on your engagement hold 48+ certifications across the team — including CISSP, CISM, OSCP, OSCE and eWPT, have published CVEs (including in widely-used enterprise products), and pair board-level security leadership with hands-on technical depth — the same consultants who advise your management also verify the controls themselves.

Board-level security leadership paired with hands-on technical depth, on every engagement. References from your sector are available under NDA.

Common Questions

Frequently asked questions

NIS2 is transposed into Belgian law and reaches medium and large entities across essential and important sectors, plus many of their suppliers. Unsure whether you are in scope? We run a short applicability check.

NIS2 compliance service →

A scan is automated and covers known issues broadly. A penetration test is manual and exploit-driven: certified testers chain weaknesses like a real attacker, prove impact and prioritise fixes. Most organisations need both.

Penetration testing →

Most organisations reach ISO 27001 certification in three to nine months, depending on scope and current maturity. With an audit or customer deadline, we work the plan back from it.

ISO 27001 service →

Yes. Curios is based at Franklin Rooseveltplaats 12 in Antwerp (Antwerpen). We work on-site with clients across Belgium and remotely throughout Europe, whichever suits the engagement.

Talk to us →

We scope a fixed price up front after a short call — no open-ended day rates. Tell us your scope and current maturity and we send a clear quote.

Scope your project →

Get in touch

See How We Can Help

You can reach us anytime via info@curios-it.eu

  • Since 2017

    Cybersecurity only

  • 48+

    Certifications across the team

  • CVEs

    Published in enterprise software

Support

Contact Info

info@curios-it.eu

Map

Visit our office

Franklin Rooseveltplaats 12,
2060 Antwerpen