CSIRT.CZ

CSIRT.CZ (CSIRT = Computer Security Incident Response Team) is a security team for coordinating the resolution of security incidents in computer networks operating in the Czech Republic. It is operated by the CZ.NIC association under a public law contract and the Cybersecurity Act.

More information on the project website

About CSIRT.CZ

What is the difference between CSIRT.CZ and CZ.NIC-CSIRT?

CSIRT.CZ

CSIRT.CZ (Computer Security Response Team) is the security team responsible for coordinating the handling of security incidents in computer networks operated in the Czech Republic. It is operated by the CZ.NIC association pursuant to a public-law contract and the Cybersecurity Act (hereinafter referred to as the “CSA”).

It is the National CSIRT of the Czech Republic. The scope of CSIRT.CZ covers all organizations subject to the lower level of obligations as defined by Section 8 et seq. of the CSA. Within its available capacity, it also handles reports from unregulated entities and the general public. More information can be found on the csirt.cz website.

CZ.NIC-CSIRT

CZ.NIC-CSIRT is the internal security team of the CZ.NIC association, responsible for handling incidents within AS25192 and AS200070, as well as incidents affecting nameservers for the .CZ domain and 0.2.4.e164.arpa. More information about this team can be found at nic.cz/csirt .

Was this helpful?

Yes

Thank you for the feedback!

How can I contact the CSIRT.CZ team?

If you are an entity defined by law that falls under the lower level of obligations and you are reporting a cybersecurity incident, you are required to contact us exclusively via the NÚKIB Portal .

If you are not subject to regulation under the Cybersecurity Act, or if you wish to contact us for a reason other than reporting a security incident, please use one of the following contacts depending on the nature of your inquiry:

info@csirt.cz is for general communication regarding the functioning of the CSIRT.CZ team
abuse@csirt.cz is specifically for reporting incidents Basic rules for incident reporting
+420 910 101 010 – telephone contact for the team during business hours (9:00 a.m. – 5:00 p.m.)
+420 222 745 111 CZ.NIC association’s 24/7 helpdesk for urgent cases outside business hours.

Was this helpful?

Yes

Thank you for the feedback!

How can I contact the CZ.NIC-CSIRT.CZ team?

Where can I report phishing, malware, DDOS, port scanning and other incidents?

STOPONLINE

What is project STOPONLINE.CZ?

Penetration tests

What is Penetration test service?

Load testing

What is load testing service?

PROKI

What is project PROKI?

What if I do not want to receive data from the PROKI project?

Web Scanner

What is Web Scanner service?

The goal is to increase the overall level of security of web applications on the Czech Internet and provide operators with a realistic picture of current threats. We therefore offer website operators the opportunity to detect and evaluate vulnerabilities using automated and manual testing.

We focus most often on identifying weaknesses from the spectrum of the ten most serious web application vulnerabilities according to an international project OWASP Top 10

More detailed information and contact for ordering the service can be found on page Web Scanner .

Was this helpful?

Yes

Thank you for the feedback!

Other

Security tests for institutions working with children

How do you handle risky (fake) e-shops?

Upon receiving information that a fake e-shop is hosted on a domain within the .cz ccTLD, we do not remove or cancel the domain from the zone. However, we will check the domain holder's details, and based on the findings, the domain may be added to the verification process, which could lead to the cancellation of the registration (but not due to the content of the domain, rather due to incorrect registration details).

If we receive a decision from one of the relevant authorities (most often the Czech Police), and this pertains not only to risky e-shops, the domain may be blocked from transfer or removed from the zone (or both, depending on the decision's wording).

Czech Trade Inspection Authority

State Agricultural and Food Inspection Authority

State Institute for Drug Control

Was this helpful?

Yes

Thank you for the feedback!