ORTAK Shield · Cybersecurity
Security your team actually likes.
NIS2 duties under control and a team that spots phishing – as a game instead of mandatory training. For companies, and white label for IT partners.
6 Dec 2025
NIS2 applies in Germany – no transition period
~30,000
companies fall under the new law
24 h
until the first incident report to the BSI
2 in 3
extortion victims are small and mid-sized firms
Sources: German NIS2 implementation act (BSIG), Heuking, Reed Smith; Orange Cyberdefense via itdaily (2026).
01 · DUTY
NIS2 cockpit
Three questions tell you whether you are in scope. Then a clear plan across the 10 mandatory areas, status per item and a reporting timeline that counts down the 24- and 72-hour deadlines.
- Scope check in one minute
- 25 measures, ordered by mandatory area
- Incidents with a countdown to reporting
- Status report for management
02 · GAME
Phishing League
Eight short rounds with real scams: fake senders, CEO fraud, MFA traps, deepfake calls. Teams compete, and whoever reports suspicious emails scores points.
- Five minutes per round, also on the phone
- Team league instead of mandatory training
- Report button: IT confirms, team scores
- Progress per department at a glance
03 · REQUIRED FROM 50
Whistleblowing channel
The secure reporting channel under the German Whistleblower Protection Act – mandatory for every company with 50+ employees. Anonymous reports, a case number instead of an account, deadline countdowns for handlers and automatic deletion after three years.
- Own link in your company branding
- Anonymous, no IP storage
- 7-day / 3-month deadlines tracked
- Only designated handlers see cases
Live demo
Are you covered by NIS2?
Three questions, one minute. Nothing is stored.
Which sector are you in?
Simplified assessment based on the German NIS2 implementation act (in force since 6 December 2025). Not legal advice – for a binding assessment please consult a lawyer or the BSI.
Live demo
One round of the Phishing League
Real or phishing? Four cases, the way they really land in your inbox.
THE NAME LIES, THE ADDRESS TELLS
Check the sender
REMEMBER
- Look at the real address behind the name, not just the display name.
- Watch for swapped letters: rn for m, 1 for l, .co for .com.
- Well-known company but a strange domain? Then it is not that company.
Live demo
What the channel looks like
A demo channel of ORTAK Demo GmbH. Please don't send real reports – those belong to your employer's channel.
FINES UP TO €20,000 IF THE CHANNEL IS MISSING (SEC. 40 HINSCHG).
FOR PARTNERS
White label
IT service providers, law firms and consultants offer Shield under their own name: own logo, own colour, as many client organisations as they like in one account.
Start a pilot
We set Shield up for you and support the first four weeks. Pricing on request.