About
Small on purpose.
Kulanek.net is a cybersecurity consultancy based in Poland, working with organisations across the European Union. We stay small so that the person who scoped your engagement is the person who does the work.
Why we exist
There is no shortage of security advice. There is a shortage of security advice from people who have had to operate the control afterwards — who have run the certification campaign that reviewers ignored, sat in the audit where the evidence did not exist, and been on call when the alert fired at three in the morning.
Kulanek.net was founded on the view that European organisations are about to face three simultaneous shifts — the post-quantum cryptographic transition, the arrival of autonomous AI in production, and a step change in regulatory expectation through NIS2 and DORA — and that most of the advice available treats these as separate problems. They are not. All three come down to the same question: who or what is allowed to do what here, and can you prove it.
How we are different
- Senior-only delivery. No pyramid model. You are not funding someone’s training on your programme.
- Genuinely independent. No reseller agreements, no implementation partnerships, no vendor commission.
- European by default. NIS2 and its national implementations, DORA, GDPR and the EU AI Act are the frame we start from.
- Selective. We take on work we are confident we can do well, and say so when a specialist would serve you better.
Founder
Jan Kulanek — Founder and Principal Consultant
Enterprise identity · Security governance · Security operations
Jan works in enterprise identity and security, with a background spanning identity governance and administration, SOC 2 and broader compliance programmes, and security operations leadership. His delivery experience covers broad range of security products and services.
That combination — the governance side and the operational side of the same problem — is what shapes how kulanek.net works: controls designed together with the evidence that proves them, and recommendations written by someone who has had to live with the consequences.
https://www.linkedin.com/in/jankulanek/
Working with us
We work remotely across the EU, on site where the work genuinely requires it, and in English or Polish. Engagements start as a fixed-scope assessment so you can judge the value before committing to anything longer. Where an engagement needs capacity beyond one person, we bring in named associates we have worked with before and tell you exactly who is doing what.