Tell the hard truth
We communicate risk and reality clearly, even when it is uncomfortable. We state what matters, what is unknown, and what it means for decisions — and we never soften findings to protect optics.
About Avencyx
Built to close the gap between paper and reality
Across major incidents, a consistent pattern repeats: compliance artifacts look strong on paper while attackers persist unnoticed, response is improvised, and security spend fails to translate into outcomes.
Avencyx was built to close this gap. We deliver measurable cyber resilience by combining proactive cyber defense with predictive incident response — grounded in attacker behavior, evidence-led reporting, and operational realism.
We focus on what changes outcomes: reducing exposure continuously, detecting and containing threats faster, and producing regulator-ready evidence without compliance theater. That evidence is produced under a DNSC cybersecurity-auditor accreditation held by both the company and its founder. We work with organizations that value resilience and must prove it — and we say no to checkbox engagements where outcomes don't matter.
Accreditation and certifications
A DNSC-accredited cybersecurity auditor
TOP CYBER TECH S.R.L., the company behind Avencyx, is registered with the Romanian National Cyber Security Directorate (DNSC) as an accredited cybersecurity auditor — the accreditation the DNSC requires for the security audits of essential and important entities under Romania's NIS framework. Our founder holds the individual auditor attestation as well, so audits are performed by an accredited auditor and signed under an accredited company.
- Holder
- TOP CYBER TECH S.R.L.
- Attestation
- Series CLE no. 25035 of 6 June 2025 (general)
- Validity
- 6 June 2025 – 5 June 2028
- National register of cybersecurity auditors
- QC-293AF63
Founder's individual attestation
Catalin Patrascu — cybersecurity auditor, series CIE no. 9073 of 2 December 2024, valid until 1 December 2027, national register ID QC-11B3AF.
Both attestations are issued under Law 362/2018 and the auditor attestation regulation approved by SGG Order 559/2021.
Professional certifications
Certifications held by the Avencyx team. Each one opens as the original certificate or its issuer's public record.
CISSP
Certified Information Systems Security Professional
ISC2 · since 2015
CISM
Certified Information Security Manager
ISACA · since 2019
GXPN
GIAC Exploit Researcher and Advanced Penetration Tester
GIAC · since 2015
GREM
GIAC Reverse Engineering Malware
GIAC · since 2015
GWAPT
GIAC Web Application Penetration Tester
GIAC · since 2015
CHFI
Computer Hacking Forensic Investigator
EC-Council · since 2014
CEH
Certified Ethical Hacker
EC-Council · since 2013
CPTE
Certified Penetration Testing Engineer
Mile2 · since 2012
Track record
Evidence from the work
- years of cybersecurity experience
- 20+
- customers served
- 50+
- NIS audit engagements
- 20+
- critical sectors served: public administration, energy, banking, water, healthcare, industry, digital infrastructure
- 7+
- cybersecurity trainings, exercises, and workshops delivered
- 50+
How we operate
Four commitments we hold in every engagement
Prove it with evidence
We do not make security claims without verifiable support. We state uncertainty explicitly, and we do not inflate severity to sell work.
Act before impact
We bias toward prevention, readiness, and early containment: predefined playbooks, tested assumptions, proactive hunting, and continuous exposure reduction.
Respect business constraints
We design security that works in real operations — budgets, legacy systems, uptime, and people included — through pragmatic controls and phased, risk-driven improvement.
Leadership
Founder
Catalin Patrascu
Founder & Lead Cybersecurity Consultant
LinkedIn profileCatalin Patrascu is the founder of Avencyx and a cybersecurity consultant with more than 20 years of experience spanning military, government, and private-sector roles.
He started in the Ministry of National Defence as a network and systems administrator, then handled incidents and investigations at CERTMIL, the military incident-response centre. From 2012 to 2018 he headed incident response and security monitoring at CERT-RO — the national CSIRT and today's DNSC — leading a team of more than ten specialists, building the national incident-management platform, and planning national and international exercises, including Romania's participation in ENISA's Cyber Europe series. He then moved to the private sector: Secureworks, PwC as cyber lead for Romania, and NTT DATA, where he designed and led the implementation of the company's global managed detection and response platform.
Internationally, he has worked since 2016 with the Council of Europe's Cybercrime Programme Office (C-PROC) across South-East Europe, the Eastern Partnership countries, Africa, and Asia — drafting cooperation procedures between CSIRTs and law enforcement and delivering exercises and training. He served as an external expert to the European Union Agency for Cybersecurity (ENISA) between 2017 and 2021, contributing to four published reports on CSIRT–law-enforcement cooperation, and has delivered trainings for the European Union Agency for Law Enforcement Training (CEPOL) and Expertise France — the French public agency for international technical cooperation and development.
He holds the CISSP, CISM, GXPN, GREM, GWAPT, CHFI, CEH, and CPTE certifications, is a FIRST liaison member and a TF-CSIRT Trusted Introducer associate, and holds a Master of Engineering in military information systems technology from the Military Technical Academy in Bucharest.
Avencyx® is an EU-registered trademark of TOP CYBER TECH S.R.L.