Free · 2-minute self-check
Most businesses fall under at least one, and Law 195/2024 becomes binding on 23 August 2026. Answer 7 quick questions for an instant, tailored read: which laws apply to you, where your gaps are, and where to start. No email required.
From a pentest to Moldova's new laws - we can help in more ways than one. Reach out, even just for advice.
Skip to the assessmentFree · 2-minute self-check
Most businesses fall under at least one, and Law 195/2024 becomes binding on 23 August 2026. Answer 7 quick questions for an instant, tailored read: which laws apply to you, where your gaps are, and where to start. No email required.
Compliance, built in
We map your security program to the laws that now bind you here - and to the international frameworks your partners and auditors already expect.
General information, not legal advice. References to the ASC, CNPDCP and named frameworks are for identification only. Confirm obligations against the official texts.
What we do
The new rules expect someone to own information security. As your external CISO, that someone is us: policies, risk, vendors, audits, and the regulator - run by senior practitioners while your team gets on with its work.
Penetration testing and red-team engagements that surface the gaps before an attacker does - not a checklist, a real adversary.
ISO 27001, SOC 2, and GDPR readiness mapped to controls you can actually operate and maintain after we leave.
We review your network architecture, cloud, identity, and backups - and give you the hardening priorities that matter, not a generic list.
Policy, access boundaries, and testing for AI copilots and agents - so you can adopt AI without leaking data or breaking the rules that bind you.
How we work
Every engagement ends with proof - evidence you can hand to a board, an auditor, or a regulator.
From the Salient team · sister product
In development · Beta open
Salient.sec turns security-awareness training and phishing simulation into one thing your auditor actually asks for: a clean, RO-first evidence pack mapped to Moldova's rules.
Who was trained, when, their score, their phishing result - exported as an RO/EN PDF + CSV your auditor accepts as-is.
Every record lines up with HG 562/2025 Ch. VIII, ISO 27001 A.6.3, and NIS2 Art. 20/21 - including the management body and key suppliers the law says you must train.
Assign your own decks, SCORM, links, or external "mark trained" - completions are recorded immutably, reminders go out on their own, and overdue people get chased for you.
HG 562/2025 Ch. VIII makes awareness training a minimum measure - covering your management body and key suppliers, with essential entities due around October 2026.
Salient.sec is in active development. Beta customers get it early and help shape what ships.
A scoped assessment takes two weeks. The clarity lasts much longer.
