Service · Cybersecurity

Securing what keeps your business running.

Websites, platforms, accounts and data: we secure what we build and what you already run — within the SME Package Cybersecurity, reimbursed up to 70%.

Since March 2025 the Ministry of the Economy funds a fifth package dedicated to cybersecurity. It covers three things: assessing your current security level, moving towards NIS2 compliance and implementing protective technologies and procedures. Our role is that of the technical provider: we start from the pre-analysis carried out by the Luxembourg House of Cybersecurity, then implement the priority measures on your digital assets — hosting, website, business applications, accounts, backups and documentation. Heavy regulatory files are handled with our specialised partners.

01 — What we implement

The eligible measures we deliver

Technical assessment

An inventory of your digital assets, configuration review, outdated versions, public exposure: a readable report with priorities ranked by risk.

Web & hosting hardening

Strict HTTPS, security headers, separated environments, patching and updates, logging. The base layer that stops most opportunistic attacks.

Access & authentication

Two-factor authentication, a password manager, role-based rights, removal of dormant and shared accounts.

Backups & recovery

Automated and tested backups, off-site copies, a written and rehearsed restore procedure — not merely configured.

Data & GDPR

Processing register, encryption, retention periods, processors and a cookie banner that meets CNPD requirements.

Procedures & NIS2

Written policies, an incident procedure, phishing awareness for your teams and documentation that supports your NIS2 trajectory.

02 — How it runs

From the official diagnosis to implementation

01

Official pre-analysis

An appointment at the House of Entrepreneurship or the eHandwierk service: the Luxembourg House of Cybersecurity defines your priority actions.

02

Quote & application

We price the selected measures between €3,000 and €25,000 excluding VAT and provide the technical description for the file.

03

Implementation

We work through the measures in order of risk, without interrupting your business, and document every change.

04

Closing & follow-up

An evaluation meeting with the Luxembourg House of Cybersecurity, then ongoing monitoring and updates.

Mortgage.lu
Finance

Mortgage.lu

Website, SEO and lead generation for a mortgage broker launched in late 2023. 340 families financed in 2025, 80% acquired by Artemis Courtage in 2026.

View project
Unicorn Real Estate
Real estate

Unicorn Real Estate

Website redesign for a 30-year-old agency, exclusive partner of Christie’s International Real Estate in Luxembourg.

View project
FAQ

FAQ

What does the SME Package Cybersecurity cover?

Assessing your current security level, progressing towards NIS2 compliance and implementing protective technologies and procedures, for a project between €3,000 and €25,000 excluding VAT reimbursed at 70%.

Is an official pre-analysis required?

Yes. The pre-analysis by the Luxembourg House of Cybersecurity is mandatory: it defines your priority actions before a provider is chosen.

What do you actually do?

Technical assessment, web and hosting hardening, two-factor authentication and access management, tested backups, GDPR compliance and written procedures.

Do you work on systems you did not build?

Yes. We work on your existing sites, applications and hosting, whoever built them originally.

Are you penetration testing specialists?

We are the technical provider that secures your digital assets. Offensive audits and heavy regulatory files are run with specialised partners.

META

About META

META is a digital agency based in Luxembourg City, working since 2007 for companies in Luxembourg and the Greater Region. We build websites, business tools and online platforms, and we run the search and online marketing that brings them visitors. Design, development and maintenance all stay in house, with a team working in English, French, German and Luxembourgish.

Every project follows the same path: framing the goals and the content, design signed off before the first line of code, development in visible releases, then launch. A website is counted in weeks, a platform or business tool in months; the schedule is set at the start, with interim dates. Every page is built for the Luxembourg market: a multilingual structure, a clean URL per language, structured data and measured loading times.

After launch we stay involved. Hosting, TLS certificate, tested backups, security updates, fixes and evolutions: most of our clients work with us over years, not over a single project. We measure what the site returns — enquiries, calls, sales — and adjust on the numbers rather than on impressions.

How we work

We always start from the real content, never from filler text: the site structure, the headings and the pages are agreed with the client before anything is designed. Layouts are drawn for mobile first, then widened to desktop, and signed off screen by screen. Development then runs in visible releases on a test environment the client can open at any time.

Every site ships on the same technical foundation: titles and descriptions written page by page, structured data, a sitemap and clean URLs in each language, compressed images, and loading times measured on both mobile and desktop. Forms are protected, data stays in Europe, and cookie handling follows the Luxembourg CNPD rules.

At handover the client gets access to the administration and a walkthrough for changing text, images and pages without us. We stay available for updates, fixes, new features and for reading the results — visitors, enquiries, positions on Google.lu — in a regular conversation rather than an automated report.

Let's review your exposure

One conversation is enough to tell a quick fix from something that deserves an SME Package Cybersecurity file.

Discuss my project