The GoTrust ecosystem: monitor, prove, store, demonstrate

Why a chain and not a suite

A backup that works is one of the ten measures NIS2 asks for. Besides that, someone has to watch your servers, someone has to maintain the policy and the evidence, and your data has to live somewhere European law applies. Large vendors solve that with a suite: everything from one party, everything in one contract, and everything lost at once when that party has a bad day.

We believe in the chain: specialised products that each work on their own, from parties that know each other, with open exchange between them. Zekura is built by GoTrust, a European software studio from Ghent. Around Zekura we work with three products that share the same conviction: European, explainable, and no black box.

Monsys: who watches your servers?

Monsys is GoTrust's monitoring product. One agent per server watches availability, resources and applications, scans the installed software for known vulnerabilities through the OSV database, deploys honeypots that trip when an intruder appears, and turns all of that into compliance evidence: not "the server is up", but "the server was 99.98 % available and Tuesday's vulnerability was patched on Thursday". EU-hosted, in Dutch, French and English, and free for up to five servers.

Where Monsys and Zekura meet: Monsys sees that a server is vulnerable or suddenly behaves in a way that points to a break-in. Zekura proves that an immutable copy of that server exists from before that moment, and that it comes back. Together they answer the two questions an auditor asks after an incident: did you know, and could you recover?

Zekura: does it come back?

That is what you are reading on this website. The agent on your server encrypts and sends to immutable storage, a separate machine really restores every night and times how long it takes, and everything goes into an evidence chain your auditor can recompute without us. Every quarter a report with the mapping to NIS2, ISO 27001, CyFun, DORA and GDPR.

Cubixion: where does your data live?

Cubixion is our storage partner: Belgian S3 object storage, built and operated in Belgium and Germany, with object lock and versioning, 99.99 % availability and no fees for inbound or outbound traffic. That last point is essential to us: whoever has to pay to read does not test. At Cubixion, Zekura can really restore every night without your invoice moving. The data centre door is open to customers; feel free to visit.

Two Belgian parties, each with its own role: Zekura builds the evidence chain and cannot delete anything, Cubixion holds the blocks and cannot read anything.

Konforma: can you demonstrate it?

Konforma maintains your compliance file for GDPR and NIS2, following the CyFun approach of the Centre for Cybersecurity Belgium: a free check to see where you stand, then a file that grows with your organisation, from € 30 a month, in Dutch, French and English. Konforma is a partner in the ecosystem, with the same conviction: Belgian organisations should be able to do this themselves, without a consultancy invoice.

Zekura's report is exactly the kind of evidence that belongs in such a file: signed, quarterly, with the norm mapping already done.

How the four work together

And underneath, all the time: Cubixion holds the blocks, under European law, without anyone being able to read or delete them.

For IT partners

Each of these products has a partner model: your own brand, your own margin, one invoice. An IT partner offering Monsys, Zekura and Konforma together delivers their customers the full NIS2 chain for what one consultancy day costs. Ask for the partner rate via the contact form.

About GoTrust

GoTrust is a European software studio from Ghent that builds products for organisations that want to keep their digital workplace, their operations and their compliance in their own hands: besides Zekura and Monsys, among others Canvos (a European workplace), Tracera (web analytics without cookies) and Flowd. All hosted in Europe, all explainable.