cybernext.nl

What Is It?

Cybernext B.V. is a cybersecurity service provider based in Hardenberg, the Netherlands, positioning itself around the idea of “digital security, delivered humanely.” Its services span both technical testing and the development of human security behavior, including penetration testing, Pentesting as a Service, vulnerability/security scanning, social engineering tests, security awareness training, talks, and workshops. The website clearly states that its main target customers are Dutch organizations, especially SMEs+, large enterprises, healthcare, government, ICT, nonprofits, finance, education, and manufacturing.

Core Capabilities

In terms of protection type, Cybernext is not a traditional product-based security vendor, but rather a consultative security assessment and capability-building service provider. PTaaS is one of its key selling points: instead of conducting a one-off annual test, it performs periodic testing of systems, applications, and infrastructure to keep up with new risks introduced by updates, feature releases, and integration changes. Deliverables include asset and scope definition, targeted testing, vulnerability documentation, risk explanations, and improvement recommendations. Reports include both a management summary and more in-depth technical content, making it easier for leadership to understand risks while also helping IT teams carry out remediation. On the social engineering side, it covers phone phishing, on-site mystery guest/intrusion scenarios, phishing, and SMS phishing; its training covers topics such as phishing, passwords, data handling, secure system usage, NIS2, and AVG/GDPR.

Pricing and Compliance

The public pages do not list fixed package prices; pricing is provided through customized quotes. The initial intake consultation is free. The terms indicate that quotes are usually valid for 30 days, prices generally exclude VAT, and travel and accommodation expenses are not included by default. Payment follows the invoice deadline, or 14 days if no deadline is specified. In terms of compliance, the website indicates ISO certification and AVG compliance, and states that sensitive information is handled in accordance with ISO 27001, BIO2, AVG, and NIS2 requirements. The PTaaS page also mentions compliance with ISO 27001 standards.

Pros and Cons

The advantages are its comprehensive service mix, covering technical vulnerabilities, employee behavior, and organizational processes at the same time; PTaaS is better suited than one-off testing for continuously changing digital environments; and its reports emphasize clarity and actionable recommendations. The drawbacks are also clear: Cybernext explicitly does not provide full official incident response, nor does it offer its own 24/7 monitoring; PTaaS uses a third-party Pentest Portal, but public materials do not explain platform integrations, data residency, APIs, or SLAs; and pricing is not transparent, requiring an inquiry.

Who It’s For / Access from China

It is better suited for mid-sized to large organizations, public-sector bodies, healthcare providers, and similar industries operating in the Netherlands that need compliance-oriented penetration testing, security awareness training, or a continuous testing mechanism. If the requirement is round-the-clock SOC, MDR, automated alerting, or multinational managed security operations, it may need to be paired with other vendors. The review text does not provide information on access from mainland China, so this remains unknown.