About

Security engineering, from Sibiu.

Gociux is run by Mihai Marangoci, a DevSecOps engineer based in Sibiu, Romania. Every article, tool and engagement on this site comes from the same place: running security day to day in a PCI DSS Level 1 payment environment.

What that means for you

PCI DSS Level 1 is the strictest tier of card-data security: the environment is assessed every year by an external assessor, and there is no room for controls that only exist on paper. That is the standard we apply to client work. A policy is finished when it runs in production and leaves evidence behind, not when the document is approved.

What we work on

• Detection and response: SIEM, alert tuning and automated playbooks
• Identity: Microsoft Entra ID and Microsoft 365 hardening
• Vulnerability management driven by what is actually exploited (CISA KEV, EPSS)
• Compliance engineering for PCI DSS, NIS2, DORA, GDPR and the Cyber Resilience Act
• Security automation and DevSecOps pipelines

How the content is made

The KEV digest and the Patch Tuesday pages are generated every day from CISA, FIRST and Microsoft data, and the numbers can be checked against those sources. Articles are drafted with AI assistance and reviewed against primary sources (legal texts, vendor documentation, regulator guidance), which every article links. Free tools run in your browser and send nothing to us.

Working together

Most engagements are fixed scope and delivered remotely, in English or Romanian, for clients in Romania and across Europe. On-site work is available in Sibiu and central Romania. See the services or write to us directly.

Read: Insights · Free tools · Services · Weekly brief