Boxfish Labs home
Boxfish Labs
  • Solutions
  • Resources
  • About
  • Labs
  • EN
  • DE
  • HU
Book a Call
Boxfish Labs home
Boxfish Labs

Menu

    • By service
      • Information Security Advisory
      • Virtual CISO
      • External DPO
      • Data Residency & Sovereignty
      • Human-centred cybersecurity awareness
      • Security Check for Vibe-Coded Apps
    • By Framework
      • GDPR
      • ISO 27001
      • DORA
      • TISAX
      • EU AI Act
      • Cyber Resilience Act
    • Audience
      • Startups and Scaleups
      • Fintech
      • Technology suppliers
      • Educators
    • View all solutions
    • Articles
    • Courses and Webinars
    • Downloads
    • Compliance Glossary
    • CRA applicability quiz
    • Privacy toolboxNEW
    • View all resources
    • About us
    • News
    • Social impact
    • Pilot partner program
    • Referral program
    • Contact
    • About Labs
    • Privacy toolbox

Featured

Dot-matrix letters CRA on a black grid background

Does your software or hardware product need to comply with the EU Cyber Resilience Act?

Take the test
ENDEHU
Book a Call

Prepare people, products, and business decisions for cyber risk

We help companies and individuals protect themselves online. We show people how to spot scams and cyber attacks, help teams make safer choices when using AI and building products, and explain what they need to do to operate safely in Europe.

Protect Your Organisation
Protect Your Personal Life

Boxfish Labs builds human cyber resilience for teams operating in Europe and UK, combining expert judgement, practical learning, and market-aware guidance when AI cannot be trusted to make the decision for you.

View all solutions
2 MIN PITCH

What and why we are doing

Cyber resilience is built across three connected layers

Technology alone cannot protect a business. Real resilience comes from the way people make decisions, how products and systems are designed, and whether the organisation can meet the security and market expectations that apply to it.

Prepare people

Human Cyber Resilience

How people recognise risk, make decisions, use AI, communicate, report concerns, and respond under pressure.

Prepare the business

Compliance and Market Readiness

What your products, data, customers, suppliers, and markets require, and how you demonstrate responsible practice.

Prepare the product

Product and Technology Assurance

How AI, data flows, access, integrations, suppliers, product choices, and delivery practices create or reduce risk.

View all solutions

14

months

9

days

until wider CRA requirements apply

Does the EU Cyber Resilience Act (CRA) apply to your product?

Take a short applicability assessment and get a preliminary result with next steps.

Start applicability assessment
Start applicability assessment

Challenges we help solve

You hope a security incident will not happen because you are not prepared

We build practical incident response plans: how your team spots and reports issues, who coordinates decisions, how containment works, and how to maintain operations under pressure.

Recommended Solution:

Virtual CISO

You need senior expertise without hiring a full-time executive

We provide on-demand security and privacy leadership that scales with your growth, giving you access to senior guidance, audit preparation, and strategy only when you need it.

Recommended Solution:

Virtual CISOExternal DPO

Your sensitive data is scattered across tools and vendors

We map personal and confidential data, cloud platforms, shared drives, collaboration tools, and access patterns to give you a clear, defensible basis for security and privacy decisions.

Recommended Solution:

Data Residency & SovereigntyInformation Security Advisory

Your security and privacy responsibilities are undefined

We establish proportionate governance structures: leadership accountability, operational ownership, policy baselines, escalation routes, and clear reporting lines so everyone knows who decides what.

Recommended Solution:

Virtual CISOInformation Security Advisory

You must meet GDPR and European privacy expectations

We handle data-flow mapping, records of processing, privacy notices, DPIAs, vendor risk reviews, and data subject requests, providing hands-on execution or dedicated DPO coverage.

Recommended Solution:

External DPOGDPR Readiness

You rely on critical third parties, cloud platforms, and SaaS

We identify critical supplier, contractor, and subprocessor dependencies, evaluate third-party risks, review contracts, and build practical oversight to protect your business continuity.

Recommended Solution:

Information Security AdvisoryVirtual CISO

Your team needs practical, inclusive security training

We design human-centred learning that builds confidence rather than fear, using role-based training, phishing exercises, workshops, and serious games that fit everyday working routines.

Recommended Solution:

Human-Centred Cybersecurity

You are adopting AI tools, cloud services, or new tech stacks

We evaluate the security, privacy, and regulatory implications of AI tools, new software architectures, and automated systems before decisions become costly or difficult to reverse.

Recommended Solution:

Security Check for Vibe-CodersEU AI Act Advisory
See what other companies ask us to solve
Courses and webinars

Upcoming events

Training and live sessions on security, privacy, and compliance.

Live online course

Book on demand

Shadow AI at Work

AI tools can make work faster, but they can also expose sensitive business information. A live, practical course for safer AI use at work.

View course
Live online course

Book on demand

Spotting phishing

Practical ways to notice urgent messages, fake logins, and social pressure before they become an incident.

View course
Live online course

Book on demand

EU AI Act for Product Teams

What the EU AI Act means for product, data, and engineering decisions, without freezing useful work.

View course
View all courses and webinars
Articles

Insights & Analysis

Detailed guides and analysis to help you make sense of security requirements and European regulations.

Impact of AI

Same Cloud, Different Risk: What CTOs Need to Acknowledge About Enterprise AI

Enterprise AI from Azure, AWS or Google Cloud can sit under familiar contracts and controls - but the use-case risk is not the same as SharePoint or Drive. A practical middle ground for CTOs between a blanket ban and uncontrolled adoption.

Read
Privacy

Can You Delete Yourself From the Internet? A Guide to Digital Erasure

You can shrink your digital footprint, but you usually cannot erase yourself completely. A practical guide to account deletion, GDPR and UK erasure rights, data brokers, and the limits of the right to be forgotten.

Read
Children Online

The EU KIDS Act: What the Proposal Could Mean for Children, Platforms and Privacy

The proposed EU KIDS Act would introduce graduated access rules for children on social media and other high-risk services. A clear comparison of the EU approach with Australia, the UK, the US, California and China, and what platforms should do now.

Read
Explore insights
Company updates

News and announcements

Short updates on events, awards, programmes, and milestones from Boxfish Labs.

Boxfish Labs going to ONE Conference 2026 in The Hague
1 October 2026

We are attending the ONE Conference 2026, Hague

Boxfish Labs will participate in the ONE Conference 2026 in The Hague on 6-7 October, Europe’s leading cybersecurity conference at the World Forum.

Read update
Boxfish Labs visited Bits and Pretzels in Munich
28 September 2026

Boxfish Labs at Bits & Pretzels in Munich

Boxfish Labs took part in Bits & Pretzels in Munich. CISO István Szabó met the Hungarian delegation and shared our mission to make cybersecurity more human-centred and accessible.

Read update
Viktoria Biki, Founder of Boxfish Labs, welcomed by HBBA Global
17 September 2026

Boxfish Labs has joined HBBA Global

Boxfish Labs has joined HBBA Global, an international business network connecting entrepreneurs, SMEs, and professional communities across the UK, Hungary, Canada, Central and Eastern Europe, and other markets.

Read update
View all company updates

Our supporters

Partners, accelerators, and programmes supporting Boxfish Labs.

  • Jumpp
  • Hungarian Innovation Agency
  • European EdTech Alliance
  • TechQuartier
  • MAFEX
  • HBBA Global

Put your security in order

The fastest way to talk to a real person about your security needs is to book a short call with one of our experts.

Talk to our experts
Boxfish Labs

Human-centred security for teams that need to move fast.

LinkedInInstagramYouTubeFacebook

Explore

  • Solutions
  • Resources
  • About
  • Labs

Legal

  • Privacy Policy
  • Impressum

© 2026 Boxfish Labs