We protect the digital future of your organization

Practical cybersecurity for people, data and operations — training, penetration testing, audits and technology protection, with close support and fast response.

Specialized team Fast response Aligned with ISO/IEC 27001 and NIST CSF
The context

The challenge

Digital threats affect organizations of all sizes and can disrupt essential operations — in any country or sector, where reliance on digital services makes continuity increasingly critical.

01

Attacks

Growing attempts to compromise people and systems.

02

Data at risk

Exposure, loss or unavailability of critical information.

03

Disruptions

Outages that affect productivity and customer service.

04

Impact

Recovery costs and loss of trust.

Global overview

Where threats come from

Origin of the malicious IP addresses reported in the last 24 hours to the AbuseIPDB community. This is a sample of real reported activity, not all malicious Internet traffic, and it is updated every few hours.

Loading data… Source: AbuseIPDB
—
malicious IPs in the sample
—
countries of origin
—
reports in 30 days
—
top source
World map showing the origin of malicious IPs Dot map. The colored circles mark the countries of origin; the larger and brighter the circle, the more malicious IPs. The list and the table below provide the same data as text.
View all countries as a table

Top sources

    Latest activity

      CountryIPs% of sampleAverage abuse confidence

      Addresses are masked. The country shows where the IP is registered, which does not necessarily match the location of the attacker (VPNs, compromised servers). Connections are not drawn to a destination because this data does not show who was targeted by what.

      What we do

      Service portfolio

      An integrated offering — People • Processes • Technology — with a simple starting point and phased progression.

      Training & Awareness

      We turn employees into the first line of defense.

      • Cyber hygiene for everyone
      • Phishing simulations
      • Workshops for executives and management
      • AI-driven threats: deepfakes and phishing

      Penetration Testing

      We identify vulnerabilities before they are exploited.

      • Application, infrastructure and Wi-Fi
      • Responsible proof of concept
      • Report with remediation plan

      Audits & Maturity

      Maturity assessment against recognized good practices.

      • Aligned with ISO/IEC 27001 and NIST CSF
      • Gap analysis
      • Prioritized roadmap
      • Supplier and supply chain security

      Compliance & Governance

      Good practices and frameworks to support compliance.

      • Personal data protection
      • Policies and procedures
      • Support for sector-specific requirements

      Technology Protection

      Firewalls, EDR, secure networks and business continuity.

      • Firewalls and secure remote access
      • EDR and endpoint response
      • Segmentation and secure Wi-Fi

      Incident Response

      Monitoring and handling of security incidents.

      • Predefined response plan
      • Containment and recovery
      • Post-incident report

      Incident under way? Contact us

      Regulatory compliance

      NIS2, DORA, CRA and CNPD: Compliance without the complexity

      The European Union has raised its requirements for cybersecurity, digital resilience and product security, and Cabo Verde has strengthened its data protection law. There are deadlines, management accountability and fines. We help you understand whether your organization is covered and prepare to comply, in clear, proportionate steps.

      Directive (EU) 2022/2555

      NIS2: cybersecurity across 18 sectors

      Applies to medium-sized and large entities in energy, transport, health, banking, digital infrastructure, manufacturing, ICT services and more. In Portugal, the regime has been in force since April 3, 2026.

      • Fines of up to €10M or 2% of worldwide turnover
      • Incident notification within 24 hours, 72 hours and 1 month
      • The management body is accountable for cybersecurity
      Read the NIS2 guide
      Regulation (EU) 2022/2554

      DORA: digital resilience in the financial sector

      Applies since January 17, 2025 to banks, insurers, asset managers, payment and crypto-asset service providers, and the ICT providers that serve them.

      • Initial notification of major incidents within 4 hours of classification
      • Resilience testing and a register of ICT providers
      • Contracts with mandatory clauses
      Read the DORA guide
      Regulation (EU) 2024/2847

      CRA: security of products with digital elements

      Applies to manufacturers, importers and distributors of products with digital elements sold in the European Union. Reporting of exploited vulnerabilities and severe incidents has been mandatory since September 11, 2026.

      • Early warning within 24 hours and notification within 72 hours
      • Security by design and throughout the entire life cycle
      • Remaining obligations from December 11, 2027
      Read the CRA guide
      Law No. 133/V/2001 · CNPD

      Data protection: the law of Cabo Verde

      Applies to any organization, public or private, that processes personal data. The 2021 reform brought it closer to the GDPR, and the National Data Protection Commission (CNPD) oversees compliance.

      • Personal data breach notification to the CNPD within 72 hours
      • Prior notification and authorization for certain processing
      • Data subject rights and a data protection officer (DPO)
      Read the CNPD guide

      How we can help

      01

      Scoping assessment

      We determine whether NIS2, DORA, the CRA, the data protection law or several of them apply, and in what capacity.

      02

      Gap analysis

      We compare what you have in place with what the law requires, measure by measure.

      03

      Plan and implementation

      Policies, processes and controls, with priorities, deadlines and owners.

      04

      Training and simulation

      Training for the management body and exercises in incident and personal data breach notification.

      Industries

      Solutions tailored to each industry

      Every industry has its own risks. We translate cybersecurity into the concrete reality of your organization.

      Banking & Finance

      Protection against digital fraud and continuity of critical services.

      Public Sector

      Protection of citizen data and resilience of digital services.

      Tourism & Hospitality

      Protection of guest data and brand reputation.

      Telecom & IT

      Protection of networks and critical infrastructure.

      SMEs & Retail

      First steps in cybersecurity, scaled to your business.

      How we work

      Methodology

      A simple cycle, applied to every project.

      01

      Assessment
      Understand the environment and the risks.

      →
      02

      Prioritization
      Focus on what has the greatest impact.

      →
      03

      Implementation
      Deliver solutions with quality.

      →
      04

      Continuous improvement
      Monitor, measure and improve.

      Why choose TFCyber CV
      Global reach

      Support for organizations in any country, with the same quality and closeness.

      Fast, flexible response

      Close follow-up, without unnecessary bureaucracy.

      Tailored solutions

      Adapted to the size and budget of each organization.

      Professional, qualified technicians

      Extensive national and international IT experience.

      Start with value

      Starter offer

      A low-risk first engagement with concrete results.

      Awareness Workshop

      Hands-on session for teams, with real examples, good practices and immediate recommendations.

      Initial Technical Assessment

      Quick analysis of the environment, identification of priority risks and clear next steps.

      Security should not begin after an incident.

      It should begin today.

      Let's talk
      Contact

      Let's talk

      Tell us about your security challenge. Our team reviews every request with care and rigour.

      Security check — required before you can send the message.

      By submitting, you agree that TFCyber CV may contact you back about this request. Learn how we handle your data in our Privacy Policy.

      Offices
      Almada (Portugal) · Praia (Cabo Verde)
      Reply
      We review your request and reply personally, with the next steps.
      Confidentiality
      Whatever you send us is treated in strict confidence.