Black Bullet - On Target Digital Solutions

Black Bullet is a Bucharest-based cybersecurity and software development firm founded in 2014. The company was co-founded by people with over 15 years' experience in software development, information security, and product development. It operates as a single entity based in Romania but serves international clients. The firm positions itself around two core practices: defensive and offensive cybersecurity services, and custom software development. Most visible in recent years is their focus on NIS 2 Directive compliance consulting, which they market heavily to essential and important entities across the EU.

Services and capabilities

Black Bullet's cybersecurity portfolio spans vulnerability assessments, penetration testing, security risk assessments, and incident response. The firm also offers malware analysis and removal, public key infrastructure (PKI) implementation, and governance/risk/compliance consulting. A significant portion of their current messaging centers on NIS 2 compliance support: gap assessments, implementation guidance, policy creation, staff training, mock audits, and cyber risk register development. They explicitly frame NIS 2 services as managing regulatory liability—their site notes that "under Law 124/2025, management bodies of Essential Entities are personally liable for cybersecurity failures" and mentions fines up to €10 million or 2% of worldwide annual turnover.

On the software side, Black Bullet develops custom applications across web and mobile platforms (iOS and Android). Their stated technology approach includes "Chain of Responsibility, Micro-services, SOA, and Monolith" architectures, with most projects API-based in support of mobile apps or frontend work. They also offer custom software development as a security-focused service, marketing "security by design" solutions.

Notable work

Clients mentioned in testimonials include Moore Global (security risk assessments for cloud environments), BT Broker de Asigurare (penetration testing), Vitaro Energy (a VITOL company; vulnerability assessment and penetration testing), and Eversheds Sutherland (cybersecurity consulting). On the software development side, the firm highlights work with EuropaFm (app development, leading to a 50% increase in downloads and maintenance of a 4.5-star rating), Drive (development of an optimal solution for process management), and Danone Romania (custom tool development). A project for Keyfact—a retail financial services company—involved building a new platform to capture, store, and index business insights to replace an outdated system. Another engagement with what appears to be labeled "Logoipsum" (possibly a template name) involved tracking marketing metrics; the firm reports increasing data accuracy by 76% and decreasing manual data collection time by 4 hours per week.

How they work

Black Bullet describes a structured engagement model for NIS 2 work: Discovery & Gap Analysis, Strategy & Roadmap, Implementation & Policy Creation, Training & Cybersecurity Culture, Mock Audit & Validation, and Maintenance & Reporting. They offer a free initial NIS 2 discovery meeting. The firm positions itself as results-oriented and deadline-driven. Their stated differentiators include simplicity, a focus on deadlines, a mix of business and technical skills, and availability. For software projects, they assemble what they call a "bespoke development team" for each engagement, with the belief that quality delivery requires focus on a single project.

Team and credentials

The firm does not publicly disclose exact headcount, but describes itself as "highly talented individuals specializing in vast areas of software development, information security, mobile development, integrated solutions, product development, project management." Co-founders have 15+ years' experience in software development, mobile and web technologies, and information security. No certifications (ISO 27001, SOC 2, etc.), awards, or Clutch/G2 ratings are mentioned in the available source material. The company has operated since 2014 and is based in Bucharest, Romania, with global reach stated but no additional office locations mentioned.