Dublin · Ireland

Penetration testing and cybersecurity compliance in Ireland.

SecuriCentrix is a Dublin-based cybersecurity consultancy and PCI SSC-accredited QSA Company, helping Irish organisations test their defences, meet NIS2, DORA, PCI DSS and GDPR expectations, and evidence resilience to boards, auditors and regulators.

Book a consultation in Ireland See our services

Ireland

Local expertise for Irish regulated organisations.

Since 2010, SecuriCentrix has worked with financial services firms, payment businesses, technology companies, healthcare providers and public-sector bodies. Our Dublin team understands the Irish regulatory landscape, from the Central Bank of Ireland's expectations under DORA to the National Cyber Security Centre's preparations for NIS2.

We combine expert-led penetration testing with continuous validation, compliance readiness and incident response support, so findings turn into fixed risk and usable evidence.

Services

Cybersecurity services for Irish organisations.

Delivered from Dublin, on-site or remotely, and aligned to the frameworks your regulators and customers expect.

Penetration testing in Dublin

Web application, API, mobile, internal, external, cloud and wireless testing, with clear risk ratings and retesting. View penetration testing.

PCI DSS QSA assessments

Readiness, gap assessments, Reports on Compliance and SAQ support for merchants and service providers under PCI DSS v4.0.1. PCI DSS in detail.

NIS2 readiness

Scoping, Article 21 gap assessment, incident-reporting design and board briefings ahead of the National Cyber Security Bill. NIS2 in detail.

DORA and TLPT preparation

ICT risk, incident classification, resilience testing and third-party register support for Irish financial entities. DORA in detail.

ISO 27001 implementation

ISMS scoping, risk assessment, Statement of Applicability, internal audit and certification readiness. ISO 27001 in detail.

Continuous assurance

Autonomous pentesting, vulnerability management and managed application security through assurance subscriptions.

Regulation

The Irish regulatory picture in 2026.

DORA has applied to EU financial entities since 17 January 2025, and the Central Bank of Ireland is the designated authority for threat-led penetration testing under the TIBER-IE framework. NIS2 has not yet been transposed into Irish law, so the original NIS regulations continue to apply while the National Cyber Security Bill progresses. GDPR continues to require appropriate security and 72-hour breach notification to the Data Protection Commission where required.

The EU Cyber Resilience Act reporting obligations for manufacturers began on 11 September 2026, and the EU AI Act became generally applicable on 2 August 2026. See our AI governance and code-to-cloud security guidance.

DORA	Applies since 17 January 2025; Central Bank of Ireland leads TLPT via TIBER-IE
NIS2	Not yet transposed in Ireland (October 2026); NIS1 regulations still apply
GDPR	Data Protection Commission; 72-hour breach notification where required
PCI DSS	v4.0.1 is the current version
EU CRA	Reporting obligations from 11 September 2026
EU AI Act	Generally applicable from 2 August 2026

Industries

Irish industries we support.

Banks, credit unions, insurers and investment firms under DORA
Payment institutions, e-money firms and merchants under PCI DSS
Technology, SaaS and software companies serving regulated customers
Healthcare, life sciences and medical-device organisations
Energy, transport, water and digital infrastructure in NIS2 scope
Public-sector bodies and semi-state organisations

FAQs

Questions from Irish clients

Do you provide on-site penetration testing in Dublin?

Yes. We deliver internal network, wireless and physical-adjacent testing on-site in Dublin and across Ireland, alongside remote external, web application, API and cloud testing.

Is NIS2 law in Ireland yet?

Not yet. As of October 2026, the National Cyber Security Bill has not been enacted, so there is no NIS2 registration duty in Ireland yet. In-scope organisations are still expected to prepare, and the original NIS regulations continue to apply.

Can you help with DORA threat-led penetration testing?

We help financial entities prepare for TLPT under TIBER-IE, including scoping, control testing and remediation. Where an entity is selected for TLPT, the Central Bank of Ireland coordinates the exercise and specific requirements apply to testers.

Are you a PCI DSS QSA in Ireland?

Yes. SecuriCentrix is a PCI SSC-accredited QSA Company and performs PCI DSS assessments for Irish merchants and service providers.

Free readiness checklists

Free checklists for Irish organisations.

See where you stand before you talk to us.

Ireland and EU

Talk to us

Talk to our Dublin team.

Tell us what you need to test, prove or prepare for, and we will recommend a practical scope.

Book a consultation in Ireland Explore assurance subscriptions

Sources

This page is general guidance, not legal advice. Last reviewed 27 October 2026.