Wildcard Group is a Belgian security practice. We prepare organisations for incidents, lead the response when one happens, manage insider risk and protect executives' private digital lives.
We write your incident response plan and playbooks with you, run tabletop exercises with your team and management, and test your defences against the attacks most likely to hit an organisation like yours.
Insider risk covers mistakes, compromised accounts and deliberate misuse by employees, contractors and partners. We design and mature insider risk programmes, from crown-jewels mapping to detection use cases and technical exit reviews. Everything is proportionate, documented and within Belgian and European employment law.
Personal digital protection for executives, board members and VIPs: their private devices, accounts and home network, and what can be found about them online. Family members can be added separately.
When an incident hits, we act as incident commander alongside your team. Our forensic investigators work out what happened, how the attacker got in and what they reached, and help you close that gap.
Security advice for management and boards, including NIS2 readiness, and courses in incident response, readiness, OSINT and OPSEC, taught by practitioners who use the material in their own casework. Courses can be tailored to your team.
Our flagship programmes are longer engagements: a three-to-six-month build for insider risk, and ongoing agreements for incident readiness and executive protection. Each combines assessment, implementation and follow-up with your team.
End-to-End IRMP Build
Design and implementation of a working insider risk management programme: charter, governance, detection, response and training, delivered alongside your team rather than handed over as a document set. Built on the CERT/SEI methodology.
Three to six months, depending on where you start. At the end, your own team runs the programme.
Incident Readiness × Response
One agreement for both sides of incident work: readiness work through the year, and an experienced incident commander at your side if an incident happens.
Your prepaid hours go where they help most: exercises, keeping your plan current, or incident response when you need it.
Executive & VIP Digital Protection
We protect the private digital life that corporate security doesn't cover. Your organisation's security team secures the office; your home network, personal devices and your family's accounts are beyond their reach. Removing personal data from data brokers isn't a one-off job, because brokers list it again, so we keep monitoring and remove it again.
Every engagement starts with a tailored threat profile. Discreet by design and focused on your security, so you and your family have peace of mind.
Six principles that shape every engagement.
Every engagement is led by analysts and consultants with years of hands-on investigation experience.
Most organisations do not need the latest tool. They need the basics done well, consistently. We ground our work in proven frameworks such as CyFun, the CIS Controls, CERT's insider risk guidance and MITRE ATT&CK, and in requirements such as NIS2.
We measure success by what has changed six months after our work, not by the number of reports delivered, and by whether you still want to work with us.
We build plans, programmes and playbooks with your team, around how you actually work, so the people who run them after us can own them.
We advise on what you need, not what we sell. Our recommendations aren't tied to any vendor.
We tell you what you need to hear, not what you want to hear. If a measure won't help, we say so, even when that means less work for us.
Vulnerabilities under active attack, breaches and supply-chain incidents, updated every hour from the CCB and other public sources. Every item carries the source's own advice and a check on whether you were already hit. Free, for technical teams.
Open Wildcard Watch ▶Five takeaways from the EPOB event in Oostende, on governance, the employee lifecycle and evidence readiness, with slides from our keynote and deep-dive session.
Read more ▶A research-backed guide grounded in Carnegie Mellon's CERT research. From governance to detection: what actually works.
Read more ▶51% of surveyed organisations saw targeted attacks on executives in 2025, up from 43% in 2023. What the data says, and what a protection programme covers.
Read more ▶Contact
Tell us what you're dealing with or which service interests you, and one of us will get back to you. For an active incident, call us.
