01 · Red Team
Offensive operations
Adversary simulations, authorised physical intrusion tests, phishing exercises and cloud security testing, based on real attacker methods.
Headquartered in Belgrade, Serbia
Expert-led cyber defence
for real incidents
Balkan resilience. Israeli discipline. One integrated cyber unit.
BKK unites senior Red Team operators, incident investigation leads and detection engineers under one operational model. We test defences, investigate breaches and strengthen detection for banks, fintech companies, critical infrastructure and other high-risk organisations across the Balkans and Europe.
Our specialists have backgrounds in intelligence services, digital forensics and high-risk investigations, including politically sensitive incidents.
Availability
24/7
24/7 availability for critical incidents across our operating regions.
Attack paths
180+
Attack paths mapped across banks, fintech, healthcare and critical infrastructure in the region.
DFIR hours
12k+
Field-proven expertise in ransomware, BEC, insider threats and cloud-native compromise scenarios.
Briefings
80+
Board and regulator sessions that convert technical findings into clear, accountable decisions.
Red Team
Full-scope adversary simulations across identity, endpoints, cloud and physical security.
DFIR
Rapid triage, containment and forensics, with evidence preserved for legal and regulatory needs.
SOC + Hunt
Detection engineering and threat hunting to harden your monitoring stack against real attackers.
Advisory
Turn cyber risk into defined priorities, accountable decisions and an executable security plan.
Our core capabilities
02 · DFIR
Digital forensics & IR
Investigate ransomware, business-email compromise and insider threats. Contain the incident, preserve evidence and direct recovery through documented findings.
03 · SOC
SOC augmentation
Threat hunting, detection engineering and Purple Team exercises that improve detection rules across your existing systems.
04 · Advisory
Cyber advisory
Set security priorities, review architecture and translate technical findings into decisions with named owners and defined actions.
OPERATIONS · SERVICES & COMPLIANCE CATALOGUE
One unit covering operations, architecture and regulation
BKK brings together offensive security specialists, DFIR experts, threat hunters and cyber strategists with GDPR, DORA and NIS2 expertise. We operate from our headquarters in Belgrade, with projects across Serbia, Montenegro, Bulgaria and Israel.
Offensive testing & Red Team
Campaigns based on the methods and behaviour of real attackers.
- Full-scope Red Team operations (identity, endpoint, cloud, physical).
- Infrastructure and application penetration testing.
- Social engineering and phishing campaigns.
- Cloud and SaaS security assessments (Microsoft 365, Azure, AWS, Google Workspace).
DFIR & incident response
Structured response led by senior incident commanders.
- Ransomware, BEC and data theft investigations.
- Root cause analysis and containment strategy.
- Forensic acquisition and evidence preservation for legal and regulatory processes.
- IR retainers with clear SLAs and predefined communication channels.
SOC, advisory & compliance
From detection engineering to regulatory readiness for GDPR, DORA and NIS2.
- Threat hunting and SOC augmentation (on-prem and MSSP models).
- Cyber advisory, architecture reviews and security roadmap design.
- GDPR consultancy: data mapping, TOMs, DPIA support, DPO-as-a-service.
- DORA and NIS2 readiness: gap analysis, control implementation and board reporting.
- Alignment with ISO 27001 and sector regulators (financial, telco, healthcare, critical infrastructure).
- Private client advisory and digital privacy.
REGIONAL FOOTPRINT · STRATEGIC RELATIONSHIPS
Countries we operate in and maintain high-profile relationships with
Our operations are led from our headquarters in Belgrade, Serbia, with long-term engagements across Israel, Serbia, Montenegro and Bulgaria.
Israel
Serbia
Montenegro
Bulgaria
FOUNDERS · NATIONAL SECURITY ORIGINS
Led by officers from counter-terrorism and national security
BKK was founded by operators who have planned and commanded counter-terrorism and national security missions where failure was not an option. They are used to real adversaries, classified briefings and decisions under political pressure. We bring that discipline into your environment: we state risks plainly, escalate when it matters and stand behind our assessments when they are challenged.
TOOLS & PLATFORMS
Tooling and platforms we work with
We work within your existing technology environment and regularly use the following platforms.
CLIENT PROFILE · REGULATED & HIGH-IMPACT ENVIRONMENTS
Built for organisations that cannot afford improvisation in cyber defence
BKK primarily serves organisations where cyber risk is tightly linked to financial stability, public trust or safety of life. Engagements are led by senior operators and advisors with combined offensive, DFIR, SOC and regulatory experience.
We coordinate directly with your security, risk and compliance teams, regulators, auditors and insurers. We establish the facts, set operational priorities and make responsibilities explicit throughout incident response and security improvement programmes.
Typical sectors we support
- Banks, payments providers and fintech platforms.
- Telecom operators, ISPs and managed service providers.
- Healthcare institutions and medical networks.
- Critical infrastructure and utilities.
- Public sector bodies with high-value data and citizen services.
For selected clients, we maintain long-term partnerships that combine offensive testing, incident response readiness, SOC augmentation and GDPR / DORA / NIS2 advisory into a single, coherent workstream.
Commercial advantage
Lower total cost, faster delivery, stronger assurance
Our engagements are typically priced 20-30% below comparable providers and delivered 30-40% faster. Annual agreements with monthly penetration tests support regular assurance and remediation. PCI DSS compliance depends on all applicable requirements and the agreed assessment scope.