Central theme in both EU-SEC (European Security Certification Framework) and MEDINA (continuous audit-based certification for cloud services).
NIXU OY
Finnish cybersecurity SME specializing in automated cloud security certification and EU Cybersecurity Act compliance frameworks.
Their core work
Nixu (now operating as DNV Cyber) is a Finnish cybersecurity SME specializing in security certification, compliance auditing, and network security for cloud and telecommunications infrastructure. They bring practical expertise in designing and implementing security certification frameworks — particularly for cloud services operating under EU regulatory requirements. Their H2020 work focuses on translating EU cybersecurity policy (notably the Cybersecurity Act) into actionable, automatable certification processes that service providers can adopt continuously rather than as one-off audits.
What they specialise in
MEDINA project explicitly targets continuous auditing using smart contracts and a formal certification language.
5G-ENSURE focused on security and resilience enablers for 5G networks, their earliest and largest-funded H2020 project.
MEDINA directly addresses compliance with the EU-wide Cybersecurity Act, positioning Nixu at the policy-to-practice interface.
How they've shifted over time
Nixu's H2020 trajectory shows a clear narrowing from broad network security toward specialized certification and compliance automation. Their earliest project (5G-ENSURE, 2015) dealt with general 5G security and resilience — a wide scope with their largest single funding. By 2017-2020, they pivoted decisively into security certification frameworks (EU-SEC) and then into continuous, automated certification aligned with the EU Cybersecurity Act (MEDINA). The progression signals a company that identified certification-as-a-service as its strategic niche.
Nixu is moving toward fully automated, continuous security certification for cloud services — expect future work at the intersection of EU regulation, smart contracts, and compliance tooling.
How they like to work
Nixu participates exclusively as a consortium partner, never as coordinator, suggesting they contribute specialized cybersecurity expertise rather than driving project management. With 34 unique partners across 12 countries from just 3 projects, they work in large, diverse consortia — typical of major EU security research initiatives. This makes them a reliable technical contributor who integrates well into established consortia without competing for the lead role.
Nixu has built a broad European network of 34 partners across 12 countries through just three projects, indicating they consistently join large, multi-national consortia. Their network spans the EU cybersecurity research community with no apparent geographic concentration beyond a natural Nordic anchor.
What sets them apart
Nixu occupies a relatively rare niche: a cybersecurity SME focused specifically on the machinery of certification and compliance, not just on threat detection or penetration testing. Their progression from EU-SEC to MEDINA shows they understand both the regulatory framework (Cybersecurity Act) and the technical means to automate it (smart contracts, formal certification languages). For consortium builders, this makes them a strong pick when a project needs a partner who can bridge EU security policy and its practical, automated implementation.
Highlights from their portfolio
- 5G-ENSURELargest single EC contribution (EUR 448,150) and Nixu's entry point into H2020, focused on foundational 5G security enablers.
- MEDINAMost technically specific project — combines smart contracts, formal certification language, and continuous auditing to operationalize the EU Cybersecurity Act for cloud providers.