Real-time detection
The detection engine continuously inspects network traffic against tens of thousands of constantly updated signatures: scans, exploits, malware, lateral movement.
24/7 active monitoring · NIS2-aligned
See cyberattacks as they happen.
VVT places a security sensor in your network, analyses traffic around the clock and alerts you the moment hostile activity appears — with clear explanations and next steps.
Already a client? Sign in to the VVT portal
Supports compliance with:
NIS2GEO 155/2024Law 124/2025ISO 27001
Built for
- SMEs
- Local public authorities
- Healthcare
- Education
- Manufacturing
- Multi-site networks
24h
for the early warning to DNSC, from identifying a significant incident
72h
for the incident notification to DNSC, from identifying the incident
0
software to install on employees' computers
1
dedicated sensor for each monitored site
Reporting deadlines as set out in Article 15 of Government Emergency Ordinance 155/2024, approved by Law 124/2025 (the transposition of the NIS2 Directive into Romanian law).
The VVT solution
An essential layer in your security strategy
Cybersecurity is built in layers and there is no single solution. VVT covers detection and rapid response — and we run the sensor, the analysis platform and the portal for you.
Alerts with context
Every alert tells you what happened, which system is involved and how serious it is — so you know what to do right away, without deciphering technical logs.
Dedicated, isolated portal
Each organisation gets its own space in portal.vvt.ro, with its own dashboards, history and users. Client data is never mixed.
Encrypted communication
The sensor sends data only through an encrypted VPN tunnel. It opens no inbound ports and never exposes your network.
Reporting and evidence
Clear reports for management and a complete event log that help you document incidents and the measures taken, as NIS2 requires.
No impact on your network
The sensor only observes traffic and never sits in its path: it doesn't slow the network, block applications or require changes on workstations.
How it works
From installation to first alert, in four steps
We handle the technical side. You get visibility and alerts.
01
Assessment and installation
Together we choose the right monitoring point and install the sensor — a dedicated device or a virtual machine on your server.
02
Secure connection
The sensor connects to the central VVT platform through an encrypted tunnel. From then on, your network is monitored continuously.
03
Analysis and correlation
Events are centralised, correlated and ranked by severity. Noise is filtered out so you only see what matters.
04
Alerting and reporting
You get alerts immediately, see everything in the portal and receive regular reports for management and audit.
The sensor receives a copy of the traffic, analyses it locally and sends events, encrypted, to the VVT platform.
Compliance
Built for the NIS2 reality
The NIS2 Directive, transposed in Romania by Government Emergency Ordinance 155/2024, requires essential and important entities to detect incidents and report them quickly to DNSC, the national cybersecurity authority. VVT covers detection and gives you the evidence you need.
- Continuous incident detection — network monitoring, one of the risk-management measures required by Article 21.
- Information for reporting — what happened, when and which systems were affected, ready for the 24h / 72h deadlines.
- Complete event log — a retained, easy-to-search history, useful for audits and post-incident analysis.
- Management reports — under NIS2, management bodies are directly accountable for cybersecurity; we give them a clear picture.
NIS2
Directive (EU) 2022/2555 · Art. 21
Detection measuresNIS2
Directive (EU) 2022/2555 · Art. 23
Incident reportingGEO 155/2024
NIS2 transposition in Romania
Notification to DNSCLaw 124/2025
National cybersecurity framework
Compliance supportISO/IEC 27001
Annex A · 8.16 Monitoring
Monitoring activitiesGDPR
Art. 33 · personal data breaches
Early detectionVVT supports compliance through incident detection, monitoring and documentation. Full compliance also requires other technical and organisational measures, which we can help you identify.
Client portal
Your whole network, in one place
Whether you have one site or dozens of branches, see the status of every sensor and every alert in a single, secure portal.
- A fully isolated space for your organisation
- Dashboards by site, attack type and severity
- Searchable history of events and alerts
- Role-based access for IT staff and management
Who it's for
Enterprise-grade security, sized for your organisation
You don't need your own security operations centre to know what's happening in your network.
SMEs
Companies without a dedicated security team that want real protection without the cost of an in-house department.
Local public authorities
City halls, county councils and their institutions, which handle citizens' data and essential services.
Healthcare
Clinics, laboratories and practices — including small networks without managed network equipment.
NIS2 entities
Essential and important entities, with one or more sites, that must detect and report incidents.
FAQ
What clients ask us most often
How does the VVT sensor work?
The sensor receives a copy of your network traffic and analyses it in real time with an intrusion detection engine. When it spots suspicious activity, it sends the event through an encrypted tunnel to the VVT platform, where it is correlated, ranked by severity and shown in your portal.
Do I need to change anything in my network?
Usually we only configure a switch port to send a copy of the traffic to the sensor (port mirroring / SPAN). For small networks without managed equipment — say, a practice with an ordinary Wi-Fi router — we have adapted installation options. Nothing is installed on employees' computers.
What kinds of attacks can it detect?
Scanning and reconnaissance, vulnerability exploitation attempts, brute-force attacks, malware talking to its command-and-control servers, lateral movement inside the network and suspicious data transfers. VVT sees what crosses the network; it doesn't replace antivirus or backups, it complements them.
What data do you collect, and where is it stored?
We collect security events and connection information (which systems talk to each other, over which protocol, to which destinations) — not the content of documents or e-mails. Data travels encrypted, is hosted in Romania and is isolated for each client.
Does VVT help me comply with NIS2?
Yes — for incident detection, monitoring and documentation, which are core requirements of NIS2 and Romania's GEO 155/2024. We give you the information needed for reporting to DNSC and a full event history. Full compliance also involves other measures, which we're happy to discuss.
How much does it cost?
Pricing depends on the number of monitored sites and traffic volume. After a short conversation about your network we'll send you a tailored, no-obligation quote.
Can I see a demo?
Of course. Fill in the form below and we'll show you the portal and real alerts from a test sensor, then discuss what would suit your organisation.
Let's talk
Find out what's really happening in your network.
Book a 30-minute demo. We'll show you the portal, a live alert feed and what monitoring would look like in your organisation.
- office@vvt.ro
- Romania