ON2IT - Zero Trust Innovators

Select your region

Talk to us →
Zero Trust Innovators · Zaltbommel, since 2005

Your Security Partner.
Homegrown in the Netherlands.

ON2IT runs your Zero Trust operation from our own Global Security Operations Center in Zaltbommel, the Netherlands. Your data stays in your own storage and your own region, and you speak to the engineer who actually makes the change.

Talk to us What you get back
What you get back

Four outcomes. Built for the Netherlands.

Outcome
01 of 04
Free Your Scarce Dutch Talent
Your engineers stop chasing alerts. Our Zaltbommel GSOC carries the 24×7 load, staffed by Dutch and European colleagues who already speak your regulatory language. Your people work on what moves the business, not a ticket queue at 2am.
Outcome
02 of 04
One Standard, Every Site
One operating model for every Dutch and European location. NIS2 now extends reporting duty across the entire supply chain, so proving the same protection the same way everywhere you operate stops being optional.
Outcome
03 of 04
Secure Partners by Default
Suppliers, and municipal or healthcare partners, get least-privilege access instead of network-wide reach, which matters directly for BIO and NEN 7510 scope. The supply chain stops being your soft underbelly.
Outcome
04 of 04
Scale Without Losing Sovereignty
Predictable per-endpoint economics, one accountable partner, and data that never leaves Dutch or EU soil. Security grows with the business instead of fighting it, or your compliance obligations.
From Zaltbommel

Zero Trust, operated - not just advised

Sovereign GSOC
Our Global Security Operations Center is operated from the Netherlands, staffed by Dutch and European colleagues. Not a front desk passing you to an operation in another jurisdiction.
People, not a ticket queue
No first line handing you to a second line. You speak to the engineer who actually makes the change, around the clock.
Our Services

Two services. One clear path to resilience.

Start where you are. Grow at your pace. Both services share the same detection engine, the same GSOC team, and the same Zero Trust intelligence. What changes is how much of the operational burden you hand to us.

Shared foundation: Detection Engine · Zero Trust Context · Sovereign Infrastructure · 24/7 GSOC
16+ Agents ZT-MCP AUXO™
Start here
MDR Detect™
The MDR you need to have
  • Sub-second Threat Detection

    Threats identified and flagged before they can move. No delay between event and response.

  • AI-Assisted Investigation, Triage and Prioritization

    Your analysts receive complete, context-rich cases ranked by impact, not a flood of raw alerts to investigate manually.

  • Real-Time Alerting with Actionable Mitigation Steps

    Every alert comes with a clear next action. Your team knows exactly what to do and why.

  • Full Data Sovereignty

    Your data stays in your region, on infrastructure we own. No third-party AI providers. No exceptions.

  • 24/7 Managed Global SOC (GSOC)

    Round-the-clock coverage from a team that already knows your environment. No cold start, no handoff.

Get MDR Detect
Grow into this
MDR Prevent™
The MDR you wish you had
  • Zero Trust Five-Step Implementation, Visualization and Management

    Your Zero Trust architecture built, mapped, and continuously managed. Not a checklist. Operational from day one.

  • 24/7 Expert Incident Response and Root Cause Analysis

    When something happens, our experts are already in your environment. They find the root cause, not just the symptom.

  • Config and Policy Best Practice Management

    Your environment stays hardened, current, and compliant. Every change documented and client-approved.

  • Human Led, AI Supported

    Senior engineers make the calls. Intelligent tooling removes the noise. You stay in control.

  • Compliance Reporting

    NIS2, GDPR, NEN 7510 and BIO coverage built in. Board-level reporting without the manual effort.

Get MDR Prevent
Strong foundationFull detection capability from day one
The natural next stepYour Detect base is already built. Prevent adds the full operations layer on top.
Technology partner

17 years with Palo Alto Networks.

Our partnership with Palo Alto Networks began in 2009. In 2020 we were named Global MSS Partner of the Year, and two of our engineers are among just 30 Cyberforce Elite Heroes worldwide. Deep product expertise, not a logo on a partner slide.

17 years in partnership

Not another name on the partner slide.

Recognition
Since 2009
Recognised worldwide
Global MSS Partner of the Year 2020, and two of our engineers are among just 30 Cyberforce Elite Heroes worldwide. That calibre of recognition doesn't happen by accident out of Zaltbommel.
Outcome
From day one
No learning curve on your account
Our engineers already know the platform in depth before they touch your environment. No months of ramp-up, no trial-and-error on production data.
Outcome
One partner
One point of contact, whole landscape
Firewall, cloud and endpoint through one accountable partner instead of separate specialists pointing at each other. Consistent policy, no gap between the pieces of your Zero Trust architecture.
Threat Intelligence

The intelligence behind the agents.

Threat Talks is ON2IT's curated threat intelligence platform. When our agents flag a TTP, the intelligence behind that flag was researched by the same team running your GSOC. Not a vendor feed. Our own work.

Explore Threat Talks
Agentic AI changes the security model. Rob Maas and Yuri Wit dissect OpenClaw, exposing AI agent security risks and the gap between autonomy and control
China is already inside your infrastructure, and the EU is done ignoring it. What this means for Zero Trust posture today
OT environments are no longer isolated. The IT/OT convergence threat model and what Zero Trust 2.0 changes about it
MongoBleed (CVE-2025-14847): an unauthenticated MongoDB memory leak and what it means for database exposure in practice
Regulation & certification

Demonstrable, including to your auditor

Directive
NIS2
NIS2 obligations
NIS2 moves accountability into the boardroom and extends reporting duties across the supply chain. We provide the detection, the incident handling and the evidence trail that goes with it.
Privacy
GDPR
GDPR and data minimisation
Detection runs on your own storage, in your own region. Telemetry does not leave your environment to be analysed by us, which materially shortens the processor chain.
Public sector
BIO
BIO for Dutch government
For municipalities, provinces and public bodies, our Protect Surfaces and controls map onto the Baseline Informatiebeveiliging Overheid.
Healthcare
NEN 7510
NEN 7510 in healthcare
For healthcare providers we work within NEN 7510. ON2IT itself is ISO 27001 and ISO 9001 certified, externally audited and renewed annually.

Want to know what this means for your organisation?

Half an hour with one of our Zero Trust engineers. No sales pitch, concrete answers.

Talk to us →