Meroi Security

BACKGROUND

Introduce your business and what you do there.

I'm the CEO of Glinteco, an IT company. We're a one-stop digital partner for SMEs and startups, offering web and mobile development, design, QA, AI automation, consultation, and marketing services to help businesses build, automate, and scale.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Meroi Security?

Our goal was to achieve EU cybersecurity compliance. We engaged Meroi Security to conduct a compliance gap assessment, develop a clear roadmap, and guide our team through the requirements of relevant EU regulations, including CRA, NIS2, and GDPR.

SOLUTION

What was the scope of their involvement?

Meroi Security acts as our on-demand cybersecurity compliance consultant. Rather than a one-time engagement, they're available whenever we have questions or need guidance on EU regulations. Key deliverables include an initial compliance gap assessment, a prioritized remediation roadmap, and ongoing advisory sessions where we can bring specific compliance challenges and get expert answers in real-time — saving us the cost of a full-time in-house compliance officer.Meroi Security's role goes beyond assessment and advisory. While they started with a thorough gap analysis and compliance roadmap, they also guide us through the implementation steps directly — advising on technical controls, helping us draft and refine internal policies, and reviewing our progress at each milestone. They don't just tell us what to fix; they work alongside us to ensure we get it done correctly.

What is the team composition?

We work with one teammate from Meroi Security.

How did you come to work with Meroi Security?

We found them through an online search. We chose them because their pricing fit our budget, their company values aligned with ours, and they had good networking and pitching skills.

What is the status of this engagement?

We started working with them in November 2024, and our engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We've gone from zero structured compliance framework to a fully documented compliance posture. We've received a complete gap analysis report covering NIS2 and GDPR requirements. We've also received a prioritized remediation roadmap with clear owners and milestones. Several key technical controls and policies have been successfully implemented, and our team's confidence in handling regulatory questions has significantly improved.Before working with Meroi Security, we had no formal compliance documentation in place. By the end of the engagement, we had a complete set of policies and a structured remediation plan ready for internal review. Our team went from spending hours trying to interpret EU regulatory texts to getting clear, actionable answers through on-demand consultation sessions.Moreover, we've successfully completed our initial compliance gap assessment and addressed all high-priority findings within the agreed timeframe. Each high-priority finding has taken 2–4 hours to address.

How did Meroi Security perform from a project management standpoint?

Meroi Security has set clear milestones and expectations from the beginning. Deliverables have consistently been met on time. The team has proactive communication, so we're never left wondering about the status of our project. They're also responsive to ad-hoc requests and questions outside of scheduled sessions. Overall, they've made the compliance process feel structured and under control.

What did you find most impressive about them?

Meroi Security has deep expertise in EU cybersecurity regulations (CRA, NIS2, GDPR, DORA). They have a practical, hands-on approach — not just theory. Moreover, they're always accessible and responsive, no matter the question.

Are there any areas they could improve?

There's nothing major. If anything, we'd appreciate more structured progress reports along the way, but this is a minor point. Overall, the engagement has exceeded our expectations.