Secure Programming
We build software with security by design. Security requirements are not added afterwards but considered from architecture through development to deployment.
IT security must not only be defined. It must be implemented technically.
NexGen IT-Security combines secure software development, modern security architectures and regulatory requirements into solutions that can be implemented technically.
01Services
Three service areas, one clear focus.
Many security requirements do not fail for lack of knowledge but because of the gap between document and implementation. That is exactly where we work: in the code, in the architecture, in the processes, and in the evidence that customers and auditors expect.
Development
NexGen develops custom software for organisations, with a particular focus on security, maintainability and controllable architectures.
Security & Compliance Consulting
Support in building information security management systems under ISO/IEC 27001 and in preparing for the Cyber Resilience Act.
02A NexGen product
AI Prompt Shield turns AI policies into technically enforceable security rules.
Organisations protect networks, systems and data with technical security controls. With generative AI, however, security requirements often rely on policies alone.
AI Prompt Shield is an on-premises security solution that sits between the user or application and the AI service and checks every request against your policies before it is forwarded.
-
Employee / application
Write a payment reminder to Berger Ltd, IBAN AT61 1904 3002 3457 3201.
- AI Prompt Shield On-premises, in your infrastructure
-
Policy & security check
Bank details detected – policy "Mask financial data".
-
Decision
- Allow
- Modify
- Block
-
AI service
Write a payment reminder to Berger Ltd, IBAN [removed].
-
Security
The check takes place before data leaves your organisation. Sensitive content is detected and, depending on the policy, masked or held back.
-
On-premises
AI Prompt Shield runs in your own infrastructure. Policies, logs and results remain under your control.
-
Governance
An AI policy becomes verifiable rules with documented decisions – a solid basis for internal controls and audits.
AI Prompt Shield is not an AI model. It does not replace an AI service – it controls the way to it.
03Compliance
ISO/IEC 27001 and the Cyber Resilience Act
Two frameworks, two questions: how does an organisation manage information security – and how secure are the digital products it places on the market?
ISO/IEC 27001
International management system standard, certifiable
An information security management system (ISMS) assesses risks, defines appropriate controls, demonstrates their effectiveness and is continually improved.
- Risk-based approach instead of a maximal template
- Controls according to Annex A of ISO/IEC 27001:2022
- Preparation for the certification audit
Cyber Resilience Act
Regulation (EU) 2024/2847, mandatory for products in scope
The Cyber Resilience Act sets cybersecurity requirements for products with digital elements – from development to vulnerability handling throughout the support period.
- Entry into force
- Reporting obligations for actively exploited vulnerabilities and severe incidents
- Remaining obligations apply
Dates according to Art. 71 of Regulation (EU) 2024/2847.
Cyber Resilience Act Consulting
Let us talk about your project.
Whether it is a secure development process, an ISMS, preparing for the Cyber Resilience Act or controlled use of AI: a first conversation clarifies where you stand and which next step makes sense.
Get in touch- office@nexgen-itsec.com
- +43 670 350 1599
- +43 670 659 2491
- St. Johann im Pongau, Austria