See it, govern it, test it, defend it.

Neon is a cybersecurity and compliance platform in four tiers. It takes you from a complete asset inventory to incident response, in one place. Built for NIS2, and available as SaaS (hosted in Germany), on-premises or air-gapped.

Request a demo

Everything connected

Assets, vulnerabilities, controls, tasks and evidence live in the same place, so one change shows up everywhere. For example:

  1. A new vulnerability is publishedNeon matches it against your Asset Inventory.
  2. You see which assets are affectedGrouped by criticality, so you know what to fix first.
  3. The related control is flaggedFor example ISO 27001 A.8.8, technical vulnerability management, or the matching NIS2 measure.
  4. A remediation task is assignedWith an owner and a deadline.
  5. The fix is recorded as evidenceReady for your next audit.

One place instead of five

Security information is usually spread across tools that don’t talk to each other.

Today

  • Asset lists in spreadsheets
  • Scanner exports and vulnerability reports
  • Policies in shared folders
  • A separate training tool
  • Fixes tracked in tickets and e-mail

With Neon

  • One asset inventory, linked to vulnerabilities
  • One view of findings, tasks and results
  • Policies mapped to frameworks
  • Awareness training in the same platform
  • One audit trail from finding to fix

Four tiers, one platform

Start with the foundation and add tiers as your security program grows.

Tier 1

Core

The foundation: know what you have, who can reach it and where it is exposed.

  • Asset InventoryEvery system, application and data store in one register.
  • Asset GroupsOrganize by business unit, criticality or location.
  • Identity & AccessUsers, roles and permissions across your environment.
  • Vulnerability ManagementAssets matched to vulnerability databases, so you see which known flaws affect you.
Tier 2

Governance

Turn standards into controls you can measure and prove.

  • Compliance FrameworksMap controls to ISO 27001, NIS2, DORA and more.
  • Risk & Gap AssessmentsFind where you stand and what is missing.
  • Policy LibraryWrite, version and approve policies with a clear audit trail.
Tier 3

ProActive

Find and fix weaknesses before attackers do.

  • Security TestingSchedule and run tests against your assets.
  • Remediation TasksAssign fixes with owners and deadlines.
  • Findings & ResultsTrack outcomes and verify that issues are closed.
  • Awareness TrainingKeep your team prepared for phishing and social engineering.
  • Threat IntelligenceStay informed about threats relevant to your assets.
Tier 4

Alert

Detect problems early and respond with a clear record.

  • Live ConnectionsBring signals from your tools into the platform.
  • Incident ResponseLog, triage and resolve incidents with full traceability.

Ready for NIS2

The NIS2 Directive and its German implementation require many mid-sized and large companies to manage cyber risk, report incidents and prove it. It covers sectors such as energy, transport, space, health, digital infrastructure and manufacturing. Management is accountable, and fines can reach up to EUR 10 million or 2% of global turnover.

What NIS2 asks for

  • Risk-management measures and security policies
  • Asset management and access control
  • Vulnerability handling
  • Incident handling and reporting (early warning within 24 hours, notification within 72 hours, final report within one month)
  • Security training, including for management
  • Proof that the measures work

Where Neon helps

  • Asset Inventory, Identity & Access, Vulnerability Management
  • Compliance Frameworks and Risk & Gap Assessments against NIS2
  • Policy Library with versioning and approval
  • Incident Response with a full record for reporting
  • Awareness Training
  • One audit trail for authorities and auditors

Runs where you need it

Same platform, three ways to deploy. Choose by your security requirements.

SaaS

Hosted and maintained by Quantenion, with hosting in Germany. The fastest way to start.

On-premises

Runs in your own data center. Your data stays under your control.

Air-gapped

For isolated networks with no internet access, such as critical infrastructure, aerospace and defense.

Supported frameworks

Manage NIS2, ISO 27001, DORA, GDPR and other requirements in Tier 2. Other frameworks are available on request.

International

  • ISO/IEC 27001, 27002, 27701
  • NIST CSF 2.0
  • NIST SP 800-53
  • CIS Controls v8
  • SOC 2
  • PCI DSS
  • COBIT
  • CMMC
  • HIPAA

European Union

  • NIS2
  • DORA
  • GDPR / DSGVO
  • Cyber Resilience Act
  • EU AI Act

Germany

  • BSI IT-Grundschutz
  • BSI C5
  • TISAX

Threat & application security

  • MITRE ATT&CK
  • OWASP Top 10, ASVS

Connectors

Connect Neon to the tools you already use. Connectors are available on request.

Cloud & identity

  • AWS, Azure, Google Cloud
  • Entra ID, Active Directory, LDAP

Security tools

  • SIEM and log management
  • EDR and endpoint security
  • Vulnerability scanners

Workflow

  • Jira, ServiceNow
  • Microsoft Teams, Slack
  • Custom API and webhooks

Contact

For demos, framework requests or connector inquiries:

📧 contact@quantenion.de
🔗 LinkedIn
📍 Munich, Germany