SvenskaEnglishNorsk

Capability statement

What Creedcon does, what you get, our product Qimbas™, the lectures and how to reach us, in one document for tenders and supplier reviews.

Download the PDFA4, with the same content as this page.

The company

Creedcon AB is a Swedish limited company run by its founder. We work with companies in Sweden and the Nordics, mainly in regulated sectors such as finance, industry and transport, and with municipalities and government agencies.

Our work spans IT security, compliance and the cloud, from architecture to running systems and servers. The focus is on cloud and AI, and on the traditional environments that still run alongside them. Our product, Qimbas™, is sold as a monthly subscription.

Between the consultancies and the tools

Large consultancies bring breadth but rarely someone who does the work themselves. Pure tools bring data but nobody to interpret it. Creedcon sits in between: specialised in security platforms such as Microsoft’s, Wiz and CrowdStrike, with a product that makes the analysis repeatable.

That means the same company can both find the gaps and fix them, and you always get to see what an analysis is based on.

Services

Cloud and infrastructure

You run business-critical systems in Azure, AWS or GCP, perhaps alongside servers of your own, and need to know that it holds. We help you all the way, from architecture to deploying, running and maintaining systems and servers. Security is built in from the start: identities, access, networks and logging set up right, and alerts that fire when something happens. We also integrate Microsoft Sentinel and Defender, set up log ingestion you can rely on, and secure your APIs.

  • Cloud architecture in Azure, AWS and GCP, with security built in
  • Deployment of systems and servers
  • Operations and maintenance, in the cloud and on premises
  • Microsoft Sentinel and Defender integrations
  • Log ingestion and data sources
  • API security

Compliance and security audits

You want to know how secure your IT environment actually is, and NIS2, DORA and the EU AI Act set requirements you must not only meet but be able to show you meet. We audit your environment and systems, assess vulnerabilities, run gap analyses against the regulations, prepare you for audits and review suppliers, so you know where you stand and what to do first.

  • Security audits of IT environments and systems
  • Vulnerability assessments
  • Gap analysis against NIS2, DORA and the EU AI Act
  • Audit preparation
  • Supplier and vendor reviews

AI security and governance

AI is already in use in your organisation, whether or not anyone decided it should be. We assess the risks in your actual use, set up governance with clear ownership, and build secure harnesses for AI agents: which tools and data they can reach, with which permissions, and with everything logged. We also write policies people can follow and a plan for secure adoption in line with the EU AI Act.

  • Risk assessment of AI use
  • AI governance: ownership, decisions and follow-up
  • Secure harnesses for AI agents: permissions, tools and logging
  • Policies and guidelines
  • Secure adoption plan

Management

Sometimes there is no security lead, sometimes there is no time. We step in as interim security lead or as IT or security manager, take over vendor management, or help the leadership team set a security strategy with goals you can track.

  • Interim security lead
  • Interim IT or security manager
  • Vendor management
  • Security strategy for leadership teams

Product

Qimbas™

Get answers from the security tools you already pay for.

Launching in Q4 2026.

Qimbas™ shows what your logs really cover, finds the patterns hiding in the noise, models the threats to what you actually run, and tells you where you stand against frameworks like SOC 2, NIS2 and DORA, with the evidence ready for your auditor.

  • See what your logs really cover, and where they have gone quiet
  • Find the patterns hiding in the noise, just by asking
  • Model the threats to what you actually run, with STRIDE
  • Know where you stand against SOC 2, NIS2, DORA and more
At launch
Azure, Microsoft 365
Next
AWS

A monthly subscription, priced by the number of users and the size of your environment. Tell us a little about yours, and we will send you a quote.

More about Qimbas: creedcon.se/en/products/

Lectures and workshops

On AI, cloud and compliance, for everyone in the organisation, on site or remote and tailored to the audience. Price on request.

  • You’ve got AI. Now what? Keynote, 45–60 minutes
  • AI without the leak Keynote, 45 minutes
  • DORA & NIS2, minus the panic Briefing, 45 minutes
  • See it before it hits Workshop, 3 hours
  • The EU AI Act for leaders Briefing, 45 minutes
  • Agents in production Keynote, 45 minutes

More about the lectures: creedcon.se/en/lectures/

The founder

Creedcon was founded and is run by Seamus Creedmire.

More than 15 years of professional experience in IT and information security, over ten of them as a consultant. Hands-on work with cloud security architecture, Microsoft Sentinel, API security, Azure infrastructure, log ingestion pipelines, security auditing and vendor management.

The experience comes from banking and finance, energy, aviation and logistics, manufacturing with strict uptime requirements, and municipalities and government agencies, in several countries: sectors covered by NIS2 and DORA. These are environments where requirements for traceability and control are strict and security work has to withstand external scrutiny.

How an engagement works

  1. First conversation

    We go through your situation, your systems and what you want to achieve.

  2. Current state

    We review the environment and document what works and where the gaps are.

  3. Remediation

    We prioritise together and carry out the work in your environment.

  4. Handover

    You receive documentation, evidence for audits and a plan for what remains.

What we stand for

Trust
Least privilege, traceability and isolation. That applies to our engagements and to how Qimbas is built.
Practical value
Recommendations that work in your real environment, with your systems and your people, not in an idealised version of it.
Openness
You understand what an analysis is based on, which data was used and what was not checked.

Company details

Company name
Creedcon AB
Organisation number
559604-9170
Registered seat
Stenungsund
Postal address
Åregren 303, 444 95 Ödsmål, Sweden
VAT number
SE559604917001

Qimbas™ is a trademark of Creedcon AB.

Book a meeting