SciTransfer
Organization

NIXU OY

Finnish cybersecurity SME specializing in automated cloud security certification and EU Cybersecurity Act compliance frameworks.

Technology SMEsecurityFISMENo active H2020 projects
H2020 projects
3
As coordinator
0
Total EC funding
€1.0M
Unique partners
34
What they do

Their core work

Nixu (now operating as DNV Cyber) is a Finnish cybersecurity SME specializing in security certification, compliance auditing, and network security for cloud and telecommunications infrastructure. They bring practical expertise in designing and implementing security certification frameworks — particularly for cloud services operating under EU regulatory requirements. Their H2020 work focuses on translating EU cybersecurity policy (notably the Cybersecurity Act) into actionable, automatable certification processes that service providers can adopt continuously rather than as one-off audits.

Core expertise

What they specialise in

Cloud security certificationprimary
2 projects

Central theme in both EU-SEC (European Security Certification Framework) and MEDINA (continuous audit-based certification for cloud services).

Continuous auditing and compliance automationprimary
1 project

MEDINA project explicitly targets continuous auditing using smart contracts and a formal certification language.

5G network securitysecondary
1 project

5G-ENSURE focused on security and resilience enablers for 5G networks, their earliest and largest-funded H2020 project.

EU Cybersecurity Act implementationemerging
1 project

MEDINA directly addresses compliance with the EU-wide Cybersecurity Act, positioning Nixu at the policy-to-practice interface.

Evolution & trajectory

How they've shifted over time

Early focus
5G network security
Recent focus
Automated cloud certification compliance

Nixu's H2020 trajectory shows a clear narrowing from broad network security toward specialized certification and compliance automation. Their earliest project (5G-ENSURE, 2015) dealt with general 5G security and resilience — a wide scope with their largest single funding. By 2017-2020, they pivoted decisively into security certification frameworks (EU-SEC) and then into continuous, automated certification aligned with the EU Cybersecurity Act (MEDINA). The progression signals a company that identified certification-as-a-service as its strategic niche.

Nixu is moving toward fully automated, continuous security certification for cloud services — expect future work at the intersection of EU regulation, smart contracts, and compliance tooling.

Collaboration profile

How they like to work

Role: specialist_contributorReach: European12 countries collaborated

Nixu participates exclusively as a consortium partner, never as coordinator, suggesting they contribute specialized cybersecurity expertise rather than driving project management. With 34 unique partners across 12 countries from just 3 projects, they work in large, diverse consortia — typical of major EU security research initiatives. This makes them a reliable technical contributor who integrates well into established consortia without competing for the lead role.

Nixu has built a broad European network of 34 partners across 12 countries through just three projects, indicating they consistently join large, multi-national consortia. Their network spans the EU cybersecurity research community with no apparent geographic concentration beyond a natural Nordic anchor.

Why partner with them

What sets them apart

Nixu occupies a relatively rare niche: a cybersecurity SME focused specifically on the machinery of certification and compliance, not just on threat detection or penetration testing. Their progression from EU-SEC to MEDINA shows they understand both the regulatory framework (Cybersecurity Act) and the technical means to automate it (smart contracts, formal certification languages). For consortium builders, this makes them a strong pick when a project needs a partner who can bridge EU security policy and its practical, automated implementation.

Notable projects

Highlights from their portfolio

  • 5G-ENSURE
    Largest single EC contribution (EUR 448,150) and Nixu's entry point into H2020, focused on foundational 5G security enablers.
  • MEDINA
    Most technically specific project — combines smart contracts, formal certification language, and continuous auditing to operationalize the EU Cybersecurity Act for cloud providers.
Cross-sector capabilities
Digital infrastructure and cloud servicesTelecommunications (5G security)Regulatory technology (RegTech) and complianceSmart contract applications beyond finance
Analysis note: Profile based on only 3 projects, but the thematic coherence across all three (security certification) provides a clear signal. Early-period keywords are empty in the data, so evolution analysis relies on project titles and dates. Nixu rebranded to DNV Cyber (reflected in short name), suggesting acquisition by DNV Group — current organizational structure may differ from H2020 participation period.