DORA · Regulation (EU) 2022/2554
See which DORA requirements OwlyScan covers — with proof you can show.
EU hosted · Audit-ready reports · Free company check
OwlyScan
OwlyScan is a deep and dark web monitoring platform. It indexes documents in every format and language, watches your company and your suppliers, and turns hits into alerts and audit-ready reports.
Your entity, critical ICT service providers, and trusted third parties enter the watch list — not only hyperscalers.
OwlyScan indexes underground sources and surfaces credentials, contracts, and documents that expose you or your providers.
Alerts and audit-ready reports show that third-party exposure watch is operating over time.
OwlyScan supports selected measures with external monitoring and evidence. It is not a certification, and it does not replace your full compliance programme.
| Ref | Domain | What the framework asks | Coverage | How OwlyScan helps |
|---|---|---|---|---|
| Art. 28 | ICT third-party risk | Manage ICT third-party risk: identify, assess, and monitor risks stemming from ICT service providers, including concentration and critical providers. | Covered | Continuous deep and dark web monitoring of named ICT providers and key vendors, with alerts and reports for third-party risk files. |
| Arts. 28–30 | Provider monitoring · cyber due diligence | Ongoing monitoring and due diligence of ICT third-party arrangements beyond contract signature. | Covered | Watch what circulates about providers (credentials, contracts, dumps, mentions); evidence that cyber due diligence watch is operational over time. |
Manage ICT third-party risk: identify, assess, and monitor risks stemming from ICT service providers, including concentration and critical providers.
Continuous deep and dark web monitoring of named ICT providers and key vendors, with alerts and reports for third-party risk files.
Ongoing monitoring and due diligence of ICT third-party arrangements beyond contract signature.
Watch what circulates about providers (credentials, contracts, dumps, mentions); evidence that cyber due diligence watch is operational over time.
| Ref | Domain | What the framework asks | Coverage | How OwlyScan helps |
|---|---|---|---|---|
| Arts. 9–10 | Detection & response | Detect anomalous activities and respond to ICT-related incidents. | Partial | Early external signal when credentials or documents appear underground. Not internal anomaly detection or containment tooling. |
| Art. 17 | ICT-related incident management | Detect, manage, and notify ICT-related incidents through defined processes. | Partial | Alerts and Investigation mode for underground scoping; process ownership stays with the entity. |
| Art. 19 | Major ICT-related incident reporting | Report major ICT-related incidents to competent authorities within mandated timelines. | Partial | Timestamped artefacts for timeline and narrative. Does not file reports. |
| Arts. 5–6 | ICT risk management framework | Identify ICT risks, protect systems and data, and maintain an ICT risk management framework. | Partial | Objective exposure evidence for the entity and providers as input to risk analysis — beyond self-attestation. |
| Art. 13 | Learning & evolving | Learn from ICT-related incidents and cyber threats and improve measures accordingly. | Partial | Investigation outputs feed post-incident lessons. Not a full learning-management system. |
| Art. 45 | Information sharing | Voluntary arrangements to share cyber threat information and intelligence among trusted communities. | Partial | Entity-scoped underground intelligence that can feed sharing. Does not operate ISACs or legal sharing vehicles. |
Detect anomalous activities and respond to ICT-related incidents.
Early external signal when credentials or documents appear underground. Not internal anomaly detection or containment tooling.
Detect, manage, and notify ICT-related incidents through defined processes.
Alerts and Investigation mode for underground scoping; process ownership stays with the entity.
Report major ICT-related incidents to competent authorities within mandated timelines.
Timestamped artefacts for timeline and narrative. Does not file reports.
Identify ICT risks, protect systems and data, and maintain an ICT risk management framework.
Objective exposure evidence for the entity and providers as input to risk analysis — beyond self-attestation.
Learn from ICT-related incidents and cyber threats and improve measures accordingly.
Investigation outputs feed post-incident lessons. Not a full learning-management system.
Voluntary arrangements to share cyber threat information and intelligence among trusted communities.
Entity-scoped underground intelligence that can feed sharing. Does not operate ISACs or legal sharing vehicles.
DORA incident handling and third-party oversight both need external signals. Underground publication is often an early one.
Continuous watch on you and critical ICT third parties supports Art. 28 monitoring before a major ICT-related incident is declared.
Alerts when provider or entity material appears underground feed detection and analysis under Arts. 9–10 and 17.
Investigation mode scopes what was published, about whom, and since when — for Art. 19 narrative support and Art. 13 learning.
OwlyScan does not isolate systems, run TLPT, restore core banking services, or file reports with competent authorities.
Outputs designed for operational resilience leads, compliance, procurement, and ICT risk.
EU hosted · Audit-ready reports · Free company check
