Meet the Consortium

Complementary expertise from the cybersecurity industry and Romania's national cybersecurity authority, working together to strengthen national and European cyber resilience.

The SIEMBIOT consortium brings together complementary expertise from the cybersecurity industry and Romania's national cybersecurity authority to strengthen national and European resilience against cyber threats.

By combining operational Security Operations Centre experience, cybersecurity platform development, cyber threat intelligence, incident-response coordination and national cyber-defence expertise, the consortium ensures that SIEMBIOT delivers both an operational cybersecurity capability and a collaborative environment for research, training and knowledge sharing.

The project is implemented by Expertware, as Project Coordinator, together with the Romanian National Cyber Security Directorate – DNSC, as project partner.

Project Coordinator

Expertware


Expertware is a European cybersecurity and IT services company founded in 2006, with extensive experience in designing, implementing and operating Security Operations Centres (SOCs), managed cybersecurity services, cloud and hybrid infrastructures, cybersecurity platforms, complex enterprise IT environments and AI-enabled cybersecurity solutions.

With more than two decades of experience delivering cybersecurity services to public institutions and private organisations across Europe, Expertware combines operational expertise with advanced research and innovation activities funded under European programmes. Backed by a team of more than 110 engineers and over 250 industry certifications, the company brings expertise in software development, AI/ML, IT architecture, business intelligence, process automation, and managed services, supporting the delivery of secure and innovative solutions for complex enterprise environments.

As coordinator of the SIEMBIOT project, Expertware is responsible for the overall project management, technical coordination, platform architecture, development, deployment and operation of the SIEMBIOT integrated cybersecurity platform.

Within the project, Expertware leads the creation and operation of a modular platform integrating:

  • Security Information and Event Management;

  • Security Operations Centre capabilities;

  • Network Operations Centre capabilities;

  • Cyber Threat Intelligence;

  • Vulnerability Management;

  • Security analytics and reporting;

  • Automation and incident-response processes;

  • A collaborative cybersecurity research data lake;

  • Training and cyber-range environments.

Expertware is also responsible for integrating cybersecurity data from beneficiary environments, operating dedicated SOC-as-a-Service tenants, supporting beneficiary onboarding and developing the shared technical services needed for cybersecurity research, training and collaboration.

The company's operational experience helps ensure that the platform can be deployed in realistic enterprise environments and can coexist with existing commercial security products and customer technology investments. The SIEMBIOT architecture is designed to integrate data from multiple cloud environments, security technologies, endpoints, network devices and enterprise applications into a normalised and anonymised cybersecurity data lake.

Expertise
  • Security Operations Centres
  • Managed Detection and Response
  • SIEM and SOC Platforms
  • Network Operations Centres
  • Cyber Threat Intelligence
  • Vulnerability Management
  • Incident Response
  • Threat Hunting
  • Cloud and Hybrid Security
  • Security Automation and Orchestration
  • Cybersecurity Data Analytics
  • Cybersecurity Research and Innovation
National Cybersecurity Authority

Directoratul Național de Securitate Cibernetică (DNSC)


The Romanian National Cyber Security Directorate (DNSC) is Romania's national competent authority for cybersecurity, responsible for strengthening the security and resilience of national digital infrastructure, coordinating responses to cyber incidents and supporting the implementation of national and European cybersecurity policies and regulations.

DNSC is responsible for supporting the security and resilience of Romania's digital environment, managing cyber risks and incidents, coordinating national cybersecurity response activities and contributing to the implementation of national and European cybersecurity policies.

Its responsibilities cover areas such as cybersecurity strategy and planning, incident prevention and response, cyber-risk monitoring, awareness and training, national and governmental CSIRT functions, cyber-crisis management, cybersecurity certification, regulation, supervision and cooperation with national and European stakeholders.

DNSC works closely with public authorities, operators of essential and important services, private organisations, cybersecurity communities, academia and international partners. It also contributes to European cybersecurity cooperation and has experience in projects funded through programmes including Digital Europe, Horizon Europe and the Connecting Europe Facility.

Within SIEMBIOT, DNSC contributes national-level cybersecurity expertise and supports the engagement and onboarding of relevant beneficiaries, CSIRT organisations and cybersecurity stakeholders.

DNSC supports the validation of SIEMBIOT against practical cybersecurity requirements, contributes to research and training activities and helps ensure that the platform addresses the needs of organisations operating in sectors covered by European cybersecurity legislation.

The organisation also contributes to the development of the collaborative research environment, the exchange of threat intelligence and the dissemination of cybersecurity knowledge and research results among trusted national and European actors.

Through its institutional role and stakeholder network, DNSC helps connect the operational platform developed by Expertware with the wider cybersecurity ecosystem, including public institutions, essential and important entities, CSIRTs and national and European cybersecurity communities.

Expertise
  • National Cybersecurity
  • Cyber Incident Response Coordination
  • National and Governmental CSIRT Operations
  • Cyber Threat Intelligence
  • Cyber-Risk Management
  • Critical and Essential Infrastructure Protection
  • Cyber-Crisis Management
  • Cybersecurity Regulation and Supervision
  • Cybersecurity Awareness and Training
  • National and European Cybersecurity Cooperation
  • Stakeholder Engagement
  • Cybersecurity Research and Innovation
A Complementary Partnership
The strength of the SIEMBIOT consortium lies in the complementary roles and expertise of its two partners:

Expertware designs, develops, deploys and operates the SIEMBIOT cybersecurity platform, transforming technical concepts and research results into operational cybersecurity services.

DNSC contributes national cybersecurity expertise, institutional knowledge, stakeholder engagement and validation against the practical needs of public authorities, CSIRTs and organisations operating essential and important services.

Together, the consortium combines:

operational SOC, NOC and managed-security experience;
cybersecurity platform engineering;
national cyber-defence and incident-response expertise;
access to relevant cybersecurity stakeholders;
threat-intelligence sharing;
research, training and knowledge-transfer capabilities.

This partnership allows SIEMBIOT to bridge the gap between cybersecurity technology, operational services, national cyber resilience and collaborative research.

Unlike a consortium combining industry and academia, SIEMBIOT is built around the cooperation between an operational cybersecurity provider and a national cybersecurity authority. This structure supports the project's deployment-oriented nature and ensures that its results are both technically robust and relevant to real cybersecurity environments.

Working Together to Strengthen European Cyber Resilience

The SIEMBIOT consortium is developing an open, modular and collaborative cybersecurity platform designed to increase national and regional resilience against cyberattacks.

The platform brings together SIEM, NOC, SOC, Cyber Threat Intelligence and Vulnerability Management capabilities within an integrated environment. It is designed to support complex IT landscapes, including multi-cloud infrastructures, and to integrate existing cybersecurity products rather than requiring organisations to replace their current investments.

SIEMBIOT includes:

dedicated and segregated SOC-as-a-Service environments for beneficiary organisations;
continuous security monitoring and vulnerability assessment;
cyber threat intelligence enrichment;
advanced threat-hunting and detection capabilities;
automated response processes and runbooks;
cybersecurity dashboards and operational KPIs;
a collaborative research data lake using anonymised cybersecurity data;
a portal for trusted CSIRT and research partners;
cyber ranges supporting research, testing and training;
mechanisms for sharing detection queries, indicators, attack patterns and response content.

Through these capabilities, SIEMBIOT supports cybersecurity organisations in detecting threats more rapidly, improving incident response and sharing knowledge across organisational and national boundaries. The platform is based on open integration capabilities, open standards and reusable components, helping reduce vendor dependency and supporting its continued evolution as technologies and cyber threats change.

Project Information

The project is funded by the funding authority: European Cybersecurity Industrial, Technology and Research Competence Centre (ECCC) – Grant managed through the EU Funding and Tenders Portal (eGrants), call DIGITAL-ECCC-2022-CYBER-03 – Cybersecurity and Trust, topic DIGITAL-ECCC-2022-CYBER-03-UPTAKE-CYBERSOLUTIONS, type of action: DIGITAL-JU-SME – DIGITAL JU SME Support Action.

Project title
Modular, Open, Research Platform Integrating SIEM, NOC, SOC, CTI and Vulnerability Management
Project acronym
SIEMBIOT
Grant Agreement number
101127939
Project start date
1 September 2023
Project completion date
31 August 2026
Implementation period
36 months
Total project value
€ 3,358,195.00, of which non-reimbursable financial assistance € 2,384,093.75
Cloud image

30 Days of Enterprise-Grade Cyber Defense

Step into the future of cybersecurity with full access to a unified, intelligent platform — free for 30 days. Empower your security team with:

  • Advanced SIEM for real-time visibility, smart alerting, and deep forensics across cloud, on-prem, and hybrid environments

  • Continuous Vulnerability Management to identify, prioritize, and remediate risk across all assets

  • Live Cyber Threat Intelligence integrated directly into your workflows, with global insights and attacker profiling

  • AI-Powered Threat Detection that learns from your environment, explains alerts in plain language, and suggests next steps

  • Built-in Compliance Readiness for NIS2, GDPR, ISO 27001, and more, with automated reporting and audit tools

Whether you're managing a lean SOC or a full-scale enterprise security team, this platform gives you the tools to detect faster, respond smarter, and stay ahead of evolving threats — all without the complexity.

Experience enterprise-grade protection, streamlined workflows, and total control.

Your 30-day head start begins now.

Unlock Your 30 Days Free Trial