Protecting What Matters Most.

Wildcard Group is a boutique security partner for organisations that refuse to leave risk to chance. From external threats to insider risks to executive exposure, we handle what others overlook.

Backdoors & Breaches · Wildcard Group expansion

Play it before it becomes real.

Ten new cards for the incident response card game by Black Hills Information Security, and a free pack for teams in Belgium.

Our Services

Readiness &
Resilience

Preparation that moves the needle. We build your incident response plan and playbooks, prepare you by running tabletop exercises, and stress-test your defences against the threats that actually target you.

  • IR Plan & Playbook development
  • Tabletop exercises (TTX)
  • Exposure & Defence Assessments
  • IR Readiness Reviews
  • Cyber resilience programmes

Insider Risk &
Investigations

Everything starts with a person. We design, build and mature insider risk programmes from crown jewels mapping to detection use cases and technical exit reviews: proportionate, documented and lawful, in a Belgian and European employment context.

  • Insider Risk Programme Build & Quick-Scan
  • Technical Exit Reviews (systems, logs and devices)
  • Detection Use Cases
  • NIS2 Article 21 Insider Gap Check
  • Awareness and manager training

Digital Guardian
Executive & VIP Protection

Protection that does not stop at the office door. Personal digital protection for executives, board members, VIPs, and their families. Your organisation's security team secures the office. We secure everything beyond it.

  • Personal threat profiling and OSINT assessment
  • Digital footprint assessment and reduction
  • Exposure Management and tailored Digital Security Training
  • Pre-travel security briefs
  • Family extensions available separately

Digital Forensics &
Incident Response

Leading you through the incident, with answers you can act on. When an incident hits, we stand beside your team as incident commander, backed by senior forensic investigators who find out what actually happened and close the gap that let it in.

  • IR² Retainer: incident command on call
  • Incident Handling & Executive/Board Communication
  • Root Cause Analysis & Digital Forensics
  • Compromise Assessment & Threat Hunting
  • Post-incident retrospective & lessons learned

Advisory &
Training

Taught by people who use it on real cases. Strategic security counsel and courses taught by practitioners. From Incident Response, Readiness & Resilience to OSINT masterclasses. Tailored training possible on request.

  • Strategic security consulting
  • Regulatory readiness (NIS2)
  • Board Level Advisory
  • OSINT & OPSEC Masterclasses
  • Security awareness courses

Flagship Programmes

These aren't projects with an end date. They're ongoing relationships, built and matured over time, for organisations that want security embedded into how they operate continuously, not delivered as a one-off engagement.

Insider Risk Programme

End-to-End IRMP Build

Design and implementation of a working insider risk management programme: charter, governance, detection, response and training, delivered alongside your team rather than handed over as a document set. Built on the CERT/SEI methodology.

  • Programme charter with mandate, scope and crown-jewels risk assessment
  • Governance model: roles, decision rights, HR-legal-security handover
  • Detection use-case library with tuning and triage guidance
  • Response and escalation playbooks, mapped to NIS2 Article 21

Three to six months, depending on where you start. At the end, your own team runs the programme.

IR²

Incident Readiness × Response

Two rhythms under one agreement: the work we do while it is quiet, and what we do if an incident happens and you need us. For organisations that want an experienced incident commander alongside them when it matters.

  • IR plan and playbooks, updated with what every exercise teaches
  • Tabletop exercises built around your real threat landscape
  • Exposure & defence assessment, to close the gaps before anyone uses them
  • Incident command and board communication if something does happen
  • Prepaid hours usable across readiness, advisory, and incident response, for the length of the agreement

Your prepaid hours go where they help most: exercises, keeping your plan current, or incident response when you need it.

Digital Guardian

Executive & VIP Digital Protection

We protect what corporate security does not cover: the private digital life. Your organisation's security team secures the office. Your home network, personal devices, and family's accounts live beyond their reach. Removal is not a one-time act; brokers re-list, which is exactly why the monitoring exists.

  • Executive threat profile & exposure assessment (open-source + breach corpus)
  • Continuous data broker removal and re-listing monitoring
  • Dark web, breach and exposure monitoring across the protected population
  • Account, device and household network hardening with periodic review

Every engagement starts with a tailored threat profile. Discreet by design and focused on your security, so you and your family have peace of mind.

How We Work

Six principles that shape every engagement.

Practitioner-led

Every engagement is led by analysts and consultants with years of hands-on investigation experience.

Fundamentals first

Most organisations do not need the latest tool. They need the basics done well, consistently. We ground our work in proven, practical frameworks like CyFun, CIS Controls, CERT, MITRE, and NIS2. That's what actually moves the risk needle.

Impact over deliverables

We do not measure success by reports shipped. We measure it by whether your security posture is meaningfully better six months after our work, and you still want to work with us.

Built with your team

We do not hand you a strategy and leave. We build it with your team, shaped around how you actually work, so the people who run it after us can own it.

Independent & discreet

We advise on what you need, not what we sell: no tools to push, no licences to upsell. Your trust is absolute: we operate with complete confidentiality, always.

No nonsense

We tell you what you need to hear, not what you want to hear. Straight talk, clear recommendations, real results.

About Wildcard

A Different Kind of Security Partner

We've seen nation-state actors. We know what that threat looks like. And we'll be the first to tell you that most organisations don't need to protect themselves against it. What most need is solid, pragmatic security work at a level that genuinely matters, and there's more of that available than most people realise. For those who do operate at higher risk, we can advise at that level too. Either way, we'll be straight with you about which one actually applies.

A wildcard is the pattern that matches everything. The character that catches what others miss. That's not just where our name comes from, it's how we work.

We started our careers in the military, in combat troops and CIS Operations, and transitioned into cyber operations: digital forensics, cyber intelligence, espionage cases, counter-terror work, and hundreds of high-stakes incident response cases for organisations of every size across the globe. The ones where the margin for error was small and the stakes were real. That experience became Wildcard Digital Forensics, and later grew into Wildcard Group.

Years of that work teaches you things. You learn how organisations actually fail, how threats behave once they're already inside, and where the gaps in even solid security programmes tend to be. More often than not, it comes down to implementing and maintaining basic cyberhygiene. That is why we work at the front end now. The gap that lets someone in is usually known, usually small, and usually nobody got round to it.

That's the experience and the mindset on how we operate at Wildcard Group.

Based in Belgium, working across Europe.

Insights

Security for Peace of Mind

Ready to Talk?

No pitch. No pressure. Just an honest conversation about your risks, your priorities, and how we can help you get ahead of them.

Location

Belgium