Helsinki · Cybersecurity division of Puida Oy
Threats stop
at the border.
torjua /ˈtor.ju.ɑ/ Finnish, verb — to repel; to fend off; to hold at the line.
We defend five surfaces — email, cloud, forms, the network edge and private transit — for organisations that would rather keep their incidents theoretical. Engineered in Finland, operated from Helsinki, and answerable to people you can call.
Jurisdiction
Finland · EU
Infrastructure
Owned, not resold
Incident response
Under 15 minutes
Detections
Updated daily
Surfaces
Five places an attack reaches you. We hold all five.
Each product covers one layer of the stack and is sold on its own. The designator tells you where it sits, so you can buy the gap rather than the suite.
How we operate
Security you can audit, from a company you can reach.
Most of this industry sells obscurity and calls it protection. These are the five commitments we will put in a contract.
- Finnish jurisdiction
- Your data stays under Finnish and EU law. No mandatory retention regime, no third-country transfer, and no quiet exception written into a contract you did not read.
- Infrastructure we own
- Every node in the security chain runs on hardware Puida operates. Nothing critical is subcontracted to a provider we cannot audit, and no traffic is brokered through a partner network.
- Detections you can read
- Our threat team publishes what it finds and updates detection rules daily. You get the reasoning behind a verdict, not just the verdict — which is the difference between a tool you trust and one you tolerate.
- Engineers who answer
- Support routes to the people who built the system, in Finnish or English, with no tier-one script in between. Incident response starts inside fifteen minutes.
- Evidence, not assurances
- GDPR and NIS2 artefacts are generated from live system state rather than assembled by hand before an audit. Your auditor gets logs, configuration and dates.
Provenance
Where a security company is registered decides what it can be forced to do.
Finland has no mandatory data-retention regime for the services we run, a constitutional protection for the confidentiality of correspondence, and a supervisory authority that answers in weeks rather than years. That is not a marketing position — it is the reason the infrastructure sits where it sits.
Torjua is the cybersecurity division of Puida Oy. The hardware, the network and the people are all in the same jurisdiction as the promise.
| Jurisdiction | Finland · European Union |
|---|---|
| Data residency | Finland · Sweden · Estonia · Germany |
| Frameworks | GDPR · NIS2 · SOC 2 Type II (in progress) |
| Infrastructure | Owned and operated by Puida Oy |
| Parent company | Puida Oy, registered in Finland |
Tell us what you are defending.
Send a short note about your stack and the part of it that keeps you up. A security engineer reads it and replies — usually the same working day, always with a name attached.