# Securium

> Securium is a senior cybersecurity consultancy based in Prague, Czechia. It helps organisations across Europe, the UK and the US build security operations (SecOps), implement SIEM and SOAR platforms, automate security work with AI, put security principles such as zero trust and least privilege into practice, and implement compliance controls for NIS2, DORA, GDPR and ISO 27001. Engagements are project-based, delivered by senior practitioners, and end with a documented handover to the client's own team.

Securium is a consultancy, not a managed security service provider: it designs, implements, automates and hands over security capability rather than operating a SOC on the client's behalf. Typical engagements start with a use-case workshop, continue with design and implementation, and finish with documentation, training and runbooks. Longer-term support is available as an advisory retainer or virtual CISO (vCISO), and Securium also places senior security specialists into client teams.

The founder and CEO is Tony Pham (MSc Cybersecurity with Distinction, King's College London), with over a decade of experience across Splunk, Cisco and PwC. Every page of the website is available in English and Czech (append `?lang=cs` for the Czech version). Contact: info@securium.io.

## Core services

- [Security operations (SecOps)](https://securium.io/services/security-analysis-response): SecOps maturity and roadmap, detection engineering mapped to MITRE ATT&CK, threat hunting, compromise assessments, incident response readiness and SOAR playbooks
- [SIEM & SOAR implementation](https://securium.io/services/siem-soar-implementation): platform selection, architecture and sizing, log-source onboarding, detection content as code, tuning against false positives, SOAR playbooks and integrations (Splunk, Microsoft Sentinel, Elastic, Google Chronicle, Wazuh and others)
- [AI automation for security](https://securium.io/use-cases/ai-assisted-incident-response): LLM-assisted alert triage and enrichment, investigation notes, detection drafting and reporting, with human approval and an audit trail
- [Implementation of security principles](https://securium.io/services/security-engineering): security architecture review, threat modelling, identity and access management, zero trust, cloud (AWS, Azure, GCP) and infrastructure hardening as code
- [Compliance controls & advisory](https://securium.io/services/compliance-advisory): NIS2 and DORA gap assessments, ISO 27001 preparation, GDPR, control design, automated audit evidence and vCISO retainers
- [Use-case workshops](https://securium.io/services/use-case-workshops): hands-on sessions to decide which detections, automations and controls to build first, prioritised by risk, effort and available data, ending with a prioritised backlog

## Other services

- [Detection engineering](https://securium.io/services/detection-engineering): detection-as-code programmes, MITRE ATT&CK coverage audits, AI-assisted rule development, purple team validation
- [Penetration testing & offensive security](https://securium.io/services/penetration-testing): web, API, AI/LLM application, network and cloud testing, red team exercises
- [Incident response retainers](https://securium.io/services#incident-response): part of incident readiness — a priority retainer (€699/month, includes 24 hours of incident response, 15-minute callback during business hours) and on-demand response billed hourly
- [Senior security talent](https://securium.io/#talent): embedded specialists, long-term contracts and permanent placements

## Key pages

- [Home](https://securium.io/): positioning, core services, engagement models
- [Services](https://securium.io/services): overview of all services and engagement models
- [Approach & reference architecture](https://securium.io/tech-details): how Securium designs SIEM, SOAR and security data pipelines
- [Engagement process](https://securium.io/development-process): workshop, design, implementation, testing, handover
- [About](https://securium.io/about): company background and founder
- [NIS2 readiness checklist](https://securium.io/resources/nis2-readiness-checklist): free checklist covering the NIS2 Directive's core security measures

## Use cases

- [Security automation with SOAR](https://securium.io/use-cases/security-automation-soar)
- [AI-assisted incident response](https://securium.io/use-cases/ai-assisted-incident-response)
- [Security monitoring with Wazuh](https://securium.io/use-cases/security-monitoring-wazuh)
- [Compliance automation](https://securium.io/use-cases/compliance-automation)
- [Vulnerability management & risk prioritisation](https://securium.io/use-cases/vulnerability-management-risk-prioritisation)

## Company facts

- Legal seat: Prague, Czechia (IČO 28458613, VAT ID CZ28458613)
- Markets: Czechia, Germany, the United Kingdom, the United States and the wider European Union; remote-first, EU and UK time zones
- Languages: English, Czech
- Email: info@securium.io
- LinkedIn: https://www.linkedin.com/company/securium/

## Optional

- [Full text for LLMs](https://securium.io/llms-full.txt): longer description of every service, the engagement process and company background
- [Privacy policy](https://securium.io/privacy-policy)
- [Terms and conditions](https://securium.io/terms-and-conditions)