GRC & Compliance companies in Bulgaria
Browse 25 governance, risk and compliance firms helping organisations meet ISO 27001, NIS2, DORA and similar frameworks in Bulgaria. Compare compliance frameworks, products and technology partners.
Showing 12 of 25 companies
CompanyWhat they do
- 7S7SecurityRome, ItalyPenetration Testing · Offensive Security +2 more
- BaseLine CybersecuritySofia, BulgariaPenetration Testing · Managed Security +5 more

- AIAiriaAtlanta, United StatesData Protection · Identity & Access +2 more
- ISIQ SecuritySofia, BulgariaPenetration Testing · Offensive Security +5 more
- KBKontron BulgariaSofia, BulgariaData Protection · Network Security +4 more
- GIG7 InternationalRoma, ItalyIncident Response · Digital Forensics +6 more
- 1CON ITSofia, BulgariaManaged Security · Detection & Response +12 more

- Think SmartSofia, BulgariaManaged Security · Detection & Response +6 more
- CyProSofia, BulgariaManaged Security · Detection & Response +8 more

- SM TechSofia, BulgariaManaged Security · Detection & Response +9 more

- Network TechnologySofia, BulgariaManaged Security · Detection & Response +6 more

- WPROITSofia, BulgariaPenetration Testing · Offensive Security +9 more

GRC & Compliance companies in Bulgaria at a glance
Of the 25 GRC & Compliance companies in Bulgaria, the most common security domains are Detection & Response (72%), Penetration Testing (68%) and Incident Response (68%).
Security domains
- Detection & Response72%
- Penetration Testing68%
- Incident Response68%
- Data Protection68%
- Security Awareness64%
Offering types
- Professional Services88%
- Consulting80%
- Managed Services64%
- Training48%
- Software24%
Customer segments
- Enterprise68%
- SMB52%
- Critical Infrastructure28%
- Public Sector24%
- Consumer8%
Compliance frameworks
- GDPR68%
- NIS256%
- ISO 2700156%
- DORA48%
- PCI DSS24%
Top cities
- Sofia56%
Size
- 11-50 employees4%
Most held certifications
- ISO 900112%
- OSCP8%
Key facts
- 52% run a 24/7 SOC
- 52% name their products
- 52% name technology partners
Figures from all 25 companies, as published on their own websites. Shares count only what a profile states, so they are a floor rather than a census.