IRONVALD Verified Company

Most cybersecurity products were built for offices: laptops, cloud accounts, corporate email. IRONVALD was built for the other half of the world - the power grids, factory floors, hospital networks, and payment systems where a successful attack does not just leak data, it stops physical operations.

We are an OT/ICS security company from Sarajevo, Bosnia and Herzegovina, founded in 2025. Everything we build starts from one engineering constraint: industrial equipment must never be put at risk by the tools that protect it. Legacy PLCs and RTUs can crash when actively scanned, so our platform, Outis, takes the opposite approach - it observes network traffic passively, builds a live picture of every asset and conversation in the environment, and intervenes only against the attacker. Deception is a core part of the design: instead of waiting for alerts, Outis lays traps that expose intruders early, then contains and neutralizes them autonomously.

The platform ships with everything an operator needs around it: a 24/7/365 security operations center staffed for industrial contexts, an incident-response team that can take over during an active attack, threat intelligence focused on the adversaries targeting critical infrastructure, penetration testing, and continuous compliance tracking against ISO/IEC 27001, IEC 62443, NIST CSF, and the EU NIS2 directive. Customer data never leaves the customer's environment - sovereignty is a feature, not an afterthought.

We work with utilities, manufacturers, healthcare providers, financial institutions, and public services across Bosnia and Herzegovina and the wider Balkans. We are a small, senior team, and we deliberately stay close to our clients: direct access to the engineers who built the platform, not a ticket queue. If downtime is the thing you fear most, that is exactly the problem we exist to solve.