Vlaio Cybersecurity Improvement program
Make your business more cyber‑resilient with expert guidance that is subsidised by VLAIO. As a recognized provider, Refracted Security helps Flemish SMEs and NIS2‑covered organizations assess their current posture, build an actionable plan, and implement improvements—supported by a VLAIO subsidy of up to 50% for SMEs and 35% for non‑SMEs under NIS2.

What this program covers
VLAIO’s cybersecurity improvement programs are designed to systematically raise your security resilience. A VLAIO security program always includes:
- A Cybersecurity Assessment + Roadmap
- Technical vulnerability assessment (e.g., Pentest, Code Review, Config Review, …)
- Gap analysis vs. compliance requirements/standards (e.g., ISO27k, Cyfun, NIS2, CRA, …)
- Risk‑based action plan with concrete priorities, owners, and timelines
- Implementation guidance for quick wins and strategic safeguards
- Validation & reporting to ensure outcomes are measurable and auditable
VLAIO offers this program specifically to help organizations sustainably improve cybersecurity with external expert guidance.
Who is eligible?
- Flemish SMEs, non-profit organizations and sheltered work companies seeking to improve cybersecurity with external guidance.
- Organizations that do not meet SME criteria but fall under the NIS2 directive may also participate, with a different subsidy rate.
Typical participants include manufacturers, professional services, and tech enabled businesses working with sensitive or regulated data.
Three Trajectory Packages*
While the exact scope is tailored to your organization, VLAIO structures the offering in three packages:
Small
Companies taking the first step toward cybersecurity and seeking insight into their current posture.10 days
-
Internal & external vulnerability analysis
-
Baseline assessment of your current security posture
-
Risk assessment with prioritized roadmap
-
Follow-up dashboard and recommendations
Medium
SMEs or organizations with a less complex IT/OT environment,ready for foundational improvements.
22 days
-
Everything in START
-
12 days of guidance on critical security issues
-
Tailored roadmap updates and configuration support
-
Practical advice for next steps
Plus
Companies with complex IT architecture, software,or IoT systems requiring advanced security measures.
34 days
-
Everything in MEDIUM
-
Broad guidance for all security issues
-
Advanced technical assessments
-
Multi-year cybersecurity action plan
Amounts exclude VAT.
Deep technical expertise
Technical expertise is our core. We excel at both assessment and implementation—delivering pentesting, red teaming, threat hunting, and hands-on audits, then guide the effective deployment of cyber controls.
Customizable packages
Our approach is modular and designed to fit your organization’s unique context. Combine core services with optional extensions to create a cybersecurity program that matches your priorities and risk profile.
Collaboration
We guide organizations through the full security lifecycle — governance, identify, prevent, detect, respond, and recover. By partnering strategically, we deliver seamless, end-to-end support without gaps.
How to start
1. Intake and subsidy check
2. Application to VLAIO
3. Tailored Cybersecurity Program
Once approved, we launch the program. Based on your chosen package, we perform an in-depth technical assessments and provide strategic guidance to strengthen your security posture.
4. Optional Extensions or Advanced Modules
Why choose Refracted?
- Recognized provider for VLAIO trajectories, ensuring eligibility for subsidy.
- Deep technical expertise with a compliance aware approach.
- Transparent, auditable methodology.
We keep your security system safe
At Refracted, we believe that everyone has the right to be safe in a digital world. That’s why we dedicate all our knowledge and skills to keeping your security systems strong and resilient.
Refracting risks, revealing solutions — we shine a light on hidden vulnerabilities, because you can’t fix what you can’t see.
Frequently asked questions
Yes. You can upgrade from START to MEDIUM or PLUS during the program or add extension modules for deeper topics. Extensions are only available with MEDIUM or PLUS and must keep the total cost under €60,000 (excl. VAT). Any upgrade or extension should be requested within 6 months after completing the initial package.
After the intake and VLAIO approval, we schedule your project quickly. Our team ensures minimal waiting time.
Generally one program every 4 years per company.
Schedule a free, no-obligation intake with our dedicated VLAIO contact person. We’ll define your scope and the right package, and answer any questions about the subsidy and process.
Give your security a boost
Schedule a call with our digital security experts. We check your security so you can protect your company.
Because you deserve to feel confident and safe in a digital world.
