01 ·
Know
Every alert has a name. Proprietary intelligence on 180+ adversaries active against European markets — LockBit 4.0, Scattered Spider, Cl0p, APT28, BlackCat · ALPHV.
Fortgale exists to stop the adversaries targeting European organisations.
We are a European cyber defense outpost. We don't resell technology: we produce proprietary intelligence on the 180+ adversaries active against European markets, and we turn it into containment measurable in minutes.
Compliance · accreditations
ISO/IEC 27001
ISO 9001
ISO 14001
ISO 45001
NIS2 ready
DORA aligned
GDPR · ENISA
History · four milestones
Since 2017 — a defense outpost built by design, not by reaction.
Fortgale was not founded to resell products. It was founded to apply analyst expertise — agnostic to the customer's technology.
- 2017 · FoundedA vendor-agnostic idea
Fortgale begins. A defense outpost, not a product catalogue. Analyst expertise at the centre, customer technology at the service of those who decide.
- 2019 · First MDRThe defense outpost goes live
First SOC/MDR service activated for a customer in the financial sector. The European model of detection & response moves from theory to operations.
- 2020 – 2024 · ExpansionSectors and geographies
The defense outpost expands to banks, insurance, manufacturing, transport, aerospace & defense. Customers headquartered across Europe and operating worldwide.
- Today · AI-native platformThe proprietary cyber console
A proprietary AI-amplified platform unifies visibility for CISOs, IT Managers and security leads. CTI and Threat Hunting become tier-zero AI-native.
The defense outpost · three verbs
Know. Anticipate. Stop.
Three operational verbs — not three slogans. Each verb has a metric behind it and a playbook that makes it repeatable.
02 ·
Anticipate
Median early warning 72h. The TTPs observed by CTI become detections before the adversary reaches the customer.
03 ·
Stop
Median containment ~11 min from confirmed alert. Living runbooks, not 2023 PDFs.
What we do · operational stack
One defense outpost, four operational angles.
SOC, MDR, Cyber Threat Intelligence and Advisory are not separate modules. They are four angles of a single defense outpost designed across the entire attack lifecycle.
Service · 01
Security Operations Center
European SOC operating 24·7·365 by our L2/L3 analysts. Triage, escalation and incident management — not a helpdesk.
Go to serviceService · 02
Managed Detection & Response
Managed detection and response on endpoint, identity, cloud and network. Containment in minutes, not weeks. Intel-driven, mapped on MITRE ATT&CK.
Go to serviceService · 03
Cyber Threat Intelligence
Proprietary intelligence: 180+ adversaries profiled, 34k+ weekly IOCs, 72h median early-warning. Direct dark web observation.
Go to serviceService · 04
Cybersecurity Advisory
Board-ready posture. Risk assessment, NIS2/DORA readiness, tabletop on real adversaries, vCISO. Living runbooks — not static PDFs.
Go to serviceReferences · external citations
A reference for European cybersecurity.
Fortgale's analytical work is regularly cited by institutions, leading enterprises and specialised cybersecurity outlets.
Google Cloud Blog
Evolution of UNC4990: Uncovering USB Malware's Hidden Depths
Read on Google CloudThe Hacker News
Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware
Read on The Hacker NewsCybersecurity Trends
MedusaLocker: malware analysis
Read on Cybersecurity TrendsGData · cyber.wtf
The csharp-streamer RAT
Read on cyber.wtfHiSolutions Research
How to detect the modular RAT
Read on HiSolutionsTom's Hardware
Infected USB sticks attacking European businesses
Read on Tom's HardwareCertifications · international standards
Four ISO standards, certified and verifiable.
A defense outpost's posture is demonstrated. Click on a certification to view the original PDF, always updated to the latest audit.
ISO/IEC 27001
Information Security
View certificate →ISO 9001
Quality Management
View certificate →ISO 14001
Environmental Management
View certificate →ISO 45001
Occupational Health & Safety
View certificate →The people · public and operational
The faces of the company, and those who stay behind the scenes.
Three figures publicly disclosed by policy, for governance and institutional contacts. For everyone else we apply operational silence: no names, photographs or individual roles — neither on the website nor on social channels. It's the same discipline we apply to customer engagements.
Public figures · by policy
The other figures
- Senior Cyber Security Analyst
- Senior Cyber Security Engineer
- Senior Cyber Threat Intelligence Analyst
- Cyber Security Analyst
- Cyber Security Engineer
- Cyber Threat Intelligence Analyst
- Institutional liaison
- Communications
Operational silence. Know the adversary. Don't be known.
Speak with the defense outpost
One meeting. One NDA. A conversation with our analysts.
No funnel. No generic demo. We bring you a Report built on your sector and analysts with decision authority.