Overview
Approach Cyber is a cybersecurity and privacy partner that helps organizations manage cyber resilience while they focus on their business. The company combines strategic advice, offensive and defensive expertise, SOC operations, and product engineering through its AXS Guard managed security platform, offering services including phishing awareness, governance and risk compliance, ethical hacking, threat detection and response, and cloud security.
Org chart
In the news
- Digital finance is moving fast: AI in production, instant payments, open finance 📈 That's why we decided to partner with FINTECH BELGIUM for the Digital Finance Summit 2026 (DFS26) The question every institution is asking is the same one we work on every day: how do you innovate without opening the door to risk? This year’s summit brings together leaders from banking, fintech, technology and European institutions under the theme “Building Digital Finance for the Intelligent Economy”: AI in financial services, the next generation
- When a critical Linux vulnerability goes public, every hour counts ⏰ Last week, CVE-2026-98432 made headlines: a flaw in the Linux kernel that could let an attacker take over a server remotely. Our AXS Guard by Approach Cyber customers did not have to wait. Because we build and maintain the AXS Guard operating system ourselves, our engineers rolled out the fix to every AXS Guard appliance. Administrators were informed straight away, and by the start of this week every AXS Guard was fully up to date. No research, no manual updates,
- When PHP2Shell went public, many organisations faced a hard choice: stay online and exposed, or switch their websites off until they could patch 🛜 Across Europe, government, hospital and public service websites went dark as a precaution. It did not always have to come to that. A Web Application Firewall can step in exactly where PHP2Shell strikes. But having a WAF is not the same as being protected. The difference lies in how it is tuned. In our new security advisory, we explain: ✔️ How the attack works, and why updating your
- An exploited vulnerability in your product. 24 hours to report it. Who makes the call? 📞 An attacker is exploiting a vulnerability in one of your products. From the moment you know, you have 24 hours to send an early warning. ⏳ That’s the Cyber Resilience Act, and it’s not a 2027 problem. The reporting obligations have applied since 11 September 2026, including for products already on the market. In that window, could you say: 1️⃣ Is the product in scope? 2️⃣ Who decides to report? 3️⃣ Can you confirm exploitation in time? 4️⃣
- Faut-il savoir coder pour travailler dans la cybersécurité ? La question paraît simple. La réalité du métier l’est beaucoup moins. En sécurité applicative, la maîtrise technique reste essentielle. Mais la valeur d’un consultant se mesure aussi à sa capacité à transformer une analyse technique en décision compréhensible et applicable. 🎙️ Nathan Pembe, Senior Application Security Consultant chez NVISO Security, et Simon Monteyne, Senior Application Security Consultant chez Approach Cyber, identifient quatre compétences
- Are your PHP servers patched yet? They need to be today. Read our latest Tech Alert 👇 Jean-Francois Stenuit #php2shell #php #cybersecurity #approachcyber
- 200 phishing pages analysed. 148 Telegram bot tokens traced. Five lessons learned. Our colleague Thibault Van Win shares what a year of hunting phishing infrastructure taught him. Well worth a read for anyone defending against credential theft. #threatintelligence #phishing #ApproachCyber
- 200 phishing pages analysed 🎣. Here is what I learned along the way. Since November 2025 I have been documenting phishing infrastructure, one case at a time. This week I reached 200. A few things stood out: 1. Automate early. My first eight months produced 15 cases. Once I built automated playbooks, the next three months produced 185. 2. Every bot token is a pivot point. Every kit in this dataset sent stolen credentials to a Telegram bot. I collected 148 unique bot tokens, and each one is a thread to pull. 3. Free developer hosting
Something wrong or missing? Send an update. Fixed within 24 hours.