NFIR (Netherlands Forensics and Incident Response) is a Dutch cybersecurity company that provides both preventive and reactive security services to businesses and organizations. The company does not serve individual consumers. On the reactive side, NFIR operates a 24/7 Computer Emergency Response Team (CERT) that responds to cyber incidents, including ransomware attacks. Core reactive services include incident response, incident response retainer contracts, and digital forensic investigations. The company helps organizations contain damage, preserve digital forensic evidence, and identify the root cause of incidents. On the preventive side, NFIR offers penetration testing and security audits, managed detection and response (MDR) via security monitoring, security awareness training, social engineering assessments, dossier monitoring, and ongoing security contracts. NFIR staff are authorized by the Dutch Chief of Police, reflecting the forensic and legally admissible nature of their investigative work. The company has been involved in notable Dutch cybersecurity cases and contributed to the security review of the Dutch COVID-19 contact tracing app. NFIR has published research based on over 600 penetration tests conducted at Dutch municipalities, identifying the most common cyber vulnerabilities in that sector. The company positions itself as an independent advisor, emphasizing clear communication and a data-driven approach to improving clients' security posture across technical and organizational dimensions.