Both SPEAR and EnergyShield address cybersecurity in energy systems — smart grids and broader critical infrastructure respectively.
MVETS LENISHTA OOD
Bulgarian cybersecurity SME specialising in vulnerability assessment, anomaly detection, and SIEM for energy and critical infrastructure.
Their core work
MVETS LENISHTA OOD is a Bulgarian cybersecurity SME focused on protecting critical energy infrastructure — specifically smart grids and power systems — against cyber threats. Their H2020 work covers the full security lifecycle: identifying vulnerabilities in operational technology environments, deploying anomaly detection and SIEM-based monitoring, and defending against active threats like DDoS attacks. Beyond technical tools, they also contribute to cybersecurity culture and awareness programs aimed at the human layer of infrastructure protection. Their two consecutive EU projects both target the energy sector, suggesting this is not peripheral work but their core commercial domain.
What they specialise in
EnergyShield is explicitly described as an integrated solution for vulnerability assessment, monitoring, and protection of critical infrastructure.
EnergyShield lists anomaly detection and SIEM among its core technical keywords, indicating implementation-level contribution.
DDoS mitigation is a named keyword in EnergyShield, pointing to expertise in network-layer attack defense for operational technology networks.
Cybersecurity culture is listed as a keyword in EnergyShield, suggesting a training or organizational resilience component alongside technical work.
How they've shifted over time
MVETS LENISHTA entered H2020 in 2018 with SPEAR, a smart grid security project where no detailed keywords were captured, making their exact contribution there harder to characterize. By 2019, their EnergyShield participation shows a clearly articulated technical profile: vulnerability assessment, SIEM, anomaly detection, DDoS mitigation, and security culture — suggesting they arrived at EnergyShield with a more defined role. The two projects run nearly in parallel (both active through 2021-2022), so this looks less like an evolution in focus and more like a deepening of the same niche: energy sector cybersecurity, from smart grid to broader critical infrastructure.
Their trajectory points toward becoming a specialist provider of integrated cybersecurity tooling — combining SIEM, anomaly detection, and vulnerability assessment — for energy and critical infrastructure operators, a segment with strong regulatory demand in the EU.
How they like to work
MVETS LENISHTA has participated exclusively as a consortium partner, never leading a project. Both projects placed them inside large, multi-country consortia — their 38 unique partners across just two projects means they operate in sizeable international teams averaging roughly 19 organisations per project. This profile fits a specialist contributor that brings a focused technical capability rather than consortium management or system integration responsibility.
Despite only two projects, MVETS LENISHTA has built connections with 38 distinct partners across 15 European countries, reflecting the broad consortia typical of H2020 security research. Their network is fully European with no indication of a tighter regional cluster.
What sets them apart
MVETS LENISHTA occupies a narrow but high-demand niche: cybersecurity specifically applied to energy infrastructure, combining both technical countermeasures (SIEM, DDoS defence, anomaly detection) and the softer dimension of cybersecurity culture. For consortium builders working on NIS2-related or energy sector security projects, a Bulgarian SME with this focused profile and demonstrated EU project experience is relatively rare. Their size means they can act as a nimble specialist without the overhead of a large research institution.
Highlights from their portfolio
- EnergyShieldTheir highest-funded project (EUR 108,062) and the one that fully defines their technical profile — an integrated cybersecurity platform for critical energy infrastructure covering vulnerability assessment, anomaly detection, SIEM, and DDoS mitigation.
- SPEARTheir earliest H2020 entry, focused on securing smart grid communications and privacy — establishing their energy-sector cybersecurity credentials before EnergyShield.