BALKANSKA KIBER KORPORACIJA
Mission, national security heritage and operating model
BKK operates as a disciplined cyber unit founded by officers with counter-terrorism and national security experience. We apply that operational heritage to cyber defence across the Balkans and beyond: defined objectives, controlled execution and evidence that directs the next action.
EXECUTIVE LEADERSHIP
Teodor Iliev · Chief Executive Officer
Teodor Iliev leads BKK’s strategic direction and methodological approach. His expertise centres on intelligence analysis, investigative reasoning and the assessment of complex situations involving people, organisations and competing interests.
He defines the questions, standards of evidence and analytical priorities that guide each engagement. His approach combines source evaluation, contextual understanding and disciplined consideration of alternative explanations, with particular attention to the distinction between established facts, working hypotheses and unresolved questions.
As CEO, he brings these methods into executive decision-making and the coordination of specialist teams, with an emphasis on discretion, clarity and practical judgement.
“Composure comes from operational preparation and accumulated experience. Boundaries are clear. Resolve shows when those boundaries are tested. Lessons are remembered. Gratitude is a constant. People - not always.”
TECHNOLOGY LEADERSHIP
Robert Hristov · Chief Technology Officer
Robert Hristov works at the intersection of information analysis, technology, human behaviour and security. His professional background and interests enable him to examine complex situations from informational, technical and human perspectives simultaneously - where technology meets people and information begins to acquire meaning.
His approach is based on the systematic collection, verification and analysis of information, the evaluation of sources and the tracing of connections between individual facts and processes. He pays particular attention to human behaviour, the motives behind people’s decisions and the ways in which their environment, information and interests influence them.
“Most corporate risks do not begin with betrayal. They begin with trust, negligence or innocent mistakes. Technology can protect the system, but it cannot always protect it from its operator.”
INVESTIGATIONS & INTELLIGENCE
Martin Manev · Director of Investigations & Intelligence
Martin Manev works on cases where what matters is rarely on the surface. His professional experience centres on identifying people, connections and circumstances that require more than a routine check and cannot be uncovered through a single source or perspective.
He knows how to follow a lead until its significance becomes clear - whether it points to a person, an organisation, an interest or an event. He focuses on details that change the direction of a case, discrepancies that warrant a second look and those parts of the picture for which there is no ready answer.
At BKK, Martin leads strategic research for sensitive engagements where discretion, accuracy and appropriate access are critical. His role is to reach the information that matters, establish what lies behind it and give the team a clear basis for subsequent decisions.
“Every lead has a context. Every conclusion must stand up to scrutiny.”
Mission
Our mission is to protect the operational continuity of critical organisations in the Balkans and allied regions against determined, well-funded adversaries. We respond to active incidents, investigate breaches and give boards and regulators a documented account of what happened. Organised crime, state-sponsored operators or insiders: we assess the threat, contain its impact and direct recovery around the evidence.
Operating model
Small teams. Direct coordination with your decision-makers. Senior operators lead both the technical work and the briefing. Red Team, digital forensics, incident response and threat hunting operate under one agreed plan. Scope, authority and escalation are defined before execution. The handover records findings, corrective actions and the people responsible for them.
Our operators bring experience from counter-terrorism, national security, critical infrastructure protection and private-sector security teams. Sensitive information and cross-border coordination are part of their working environment. Vetting, confidential handling and disciplined analysis are required. Facts, hypotheses and unresolved questions remain explicitly separate.
Core principles
- Authority - we state the risk, substantiate the assessment and identify the decision required. Our conclusions rest on verifiable evidence and repeatable analysis.
- Precision - every recommendation identifies the threat, the affected business process and the action required. Priorities follow the evidence and the expected reduction in risk.
- Discipline - we work discreetly, enforce the agreed scope and escalate through defined channels. Findings are recorded. Responsibilities are explicit. Established risks are reported directly.
Operating footprint
- Headquartered and operating from Belgrade, Serbia, with access to secure facilities and trusted local partners.
- On site response capability across Montenegro, Serbia, Bulgaria and Israel, including work in highly regulated and sensitive environments.
- Remote advisory and threat intelligence coverage for clients in Europe, the Middle East and other regions, aligned with local regulation and industry specific obligations.
Engagement principles
- Written rules of engagement, signed off by both sides, that define scope, authority, escalation paths and what is explicitly out of bounds.
- Evidence-based reporting with documented timelines and verifiable findings, prepared for review by regulators, auditors and internal investigation committees.
- A structured handover that strengthens your team’s capabilities, with updated runbooks, detection rules and named owners for follow-up actions.