Ceeyu

Ceeyu is a Belgian attack surface management and third-party cyber risk platform that combines continuous, automated external scanning with digital security questionnaires into a single third-party risk management (TPRM) workflow. The platform runs nine categories of external attack-surface analysis against an organization’s own digital footprint and against its suppliers’ footprints, then layers in questionnaire-based assessments so risk teams get both an outside-in technical view and a compliance-style self-attestation view of vendor risk in one place.

Founded in 2020 by cybersecurity specialist Jimmy Pommerenke and based in Bonheiden, Belgium, Ceeyu built its go-to-market around the EU regulatory wave — NIS2 and DORA both require organizations to actively manage supply-chain and third-party cyber risk, and Ceeyu positions its platform explicitly as a NIS2/DORA risk-identification tool. Named customers include the Port of Antwerp-Bruges and Belgium’s Ministry of Foreign Affairs, alongside logistics and food-industry accounts, giving it credible public-sector and critical-infrastructure reference customers for a company of its size.

Ceeyu is a regional player competing in a category with much larger, better-funded global vendors (SecurityScorecard, BitSight, UpGuard), and its roughly $1.9 million in total funding is modest by that standard. Its differentiation is regulatory specificity — being purpose-built around NIS2 and DORA compliance workflows for European organizations — rather than broader platform scale, which makes it most relevant to EU-based risk and compliance teams navigating those specific mandates.