SDK4ED (2018–2020) was specifically focused on building toolkits to quantify and eliminate technical debt while optimizing non-functional requirements such as energy efficiency.
HOLISUN SRL
Romanian software engineering SME specializing in technical debt analysis, cybersecurity assessment, and security certification for complex digital systems.
Their core work
HOLISUN SRL is a Romanian software engineering SME based in Baia Mare with hands-on expertise in software quality assessment, technical debt analysis, and cybersecurity evaluation. In practice, they contribute technical capabilities to research consortia working on tools and frameworks that help development teams build safer, more efficient software systems. Their work covers both the code quality side — measuring non-functional requirements like energy consumption and maintainability — and the security side, including vulnerability analysis, risk assessment, and certification of complex software ecosystems. They operate as a specialist technical contributor rather than a research lab, bringing applied engineering skills into EU-funded R&D projects.
What they specialise in
BIECO (2020–2023) addressed vulnerability management, risk analysis, mitigation strategies, and security certification harmonization across complex software ecosystems.
Both projects touch security from different angles — SDK4ED introduced security-by-design principles at the code level, while BIECO addressed systemic security assurance and trust in component ecosystems.
SDK4ED included fog computing as a target deployment environment, indicating experience with resource-constrained and distributed software optimization.
BIECO introduced resilience and auditing of complex systems as new competency directions, signaling a move toward systemic assurance beyond individual software components.
How they've shifted over time
HOLISUN started their H2020 participation focused on software engineering fundamentals — specifically measuring and reducing technical debt, improving energy efficiency in code, and applying security-by-design principles early in the development lifecycle. By their second project (starting 2020), the focus shifted decisively toward cybersecurity as a domain in its own right: vulnerability management, risk analysis, resilience, and the politically complex problem of harmonizing security certification across European jurisdictions. The trajectory is a clear move from software quality tools to security assurance at the ecosystem level — from fixing code to certifying trustworthiness.
HOLISUN is moving from software quality engineering toward cybersecurity assurance, positioning themselves in the fast-growing space of security certification and trust frameworks — highly relevant given the EU Cyber Resilience Act and NIS2 compliance landscape.
How they like to work
HOLISUN has participated exclusively as a consortium partner, never taking on the coordinator role across either of their two projects. They operate within mid-to-large consortia — their two projects collectively involved 22 distinct partners — suggesting they are comfortable contributing specialist technical work within a broader team structure rather than leading project management or administrative responsibilities. For a potential partner, this means HOLISUN is likely to deliver focused technical contributions reliably without requiring significant coordination overhead from the consortium lead.
HOLISUN has built connections with 22 unique consortium partners across 12 countries through just two projects — a relatively broad network for a small SME. Their collaborations span the European research and industry landscape, though no information is available to identify recurring partners or a geographic cluster within those connections.
What sets them apart
HOLISUN occupies an uncommon niche as a Romanian private SME that bridges software engineering quality practices and cybersecurity — two fields that are increasingly inseparable but rarely combined in a single small company. Their ability to work on both code-level quality optimization (technical debt, energy efficiency) and system-level security assurance (vulnerability management, certification) makes them a versatile technical contributor for digital and security-focused consortia. For a project coordinator in Eastern Europe looking for a technically capable SME with real cybersecurity research experience, HOLISUN offers credibility that most similarly-sized regional companies cannot match.
Highlights from their portfolio
- BIECOThe larger of the two projects (€429,375 EC funding, running to 2023), BIECO tackled the strategically important problem of building trust and security certification across interconnected software ecosystems — directly relevant to current EU digital regulation.
- SDK4EDSDK4ED is notable for its practical focus on developer tooling — combining technical debt elimination with energy optimization and fog computing, an unusual combination that signals applied engineering rather than pure research capability.