Blogs

We are proud to announce that the Sourcentis × Dennemeyer collaboration was selected as one of the five finalists of the Co/Start Awards 2026, organized by the House of Startups (HoST) in Luxembourg, in partnership with Le Village by CA Luxembourg. The Co/Start Awards The Co/Start Awards celebrate the most successful collaborations between startups and established companies. They highlight how the agility and innovation of young companies can meet the expertise and scale of established players to create real value. ...

We had the pleasure of speaking at BSides Luxembourg 2026 with a talk entitled “Mapping the Invisible: Why System Cartography Matters for Security and Compliance”. 📺 The video of the talk is available online: Watch the talk on archive.org Mapping the invisible You can only properly protect what you know. It sounds obvious, and yet most organizations lack a complete and up-to-date view of their information system: forgotten applications, legacy servers, undocumented flows, invisible dependencies between business processes and technical infrastructure. These grey areas are precisely what become security blind spots — and gaping holes on the day of an incident. ...

Mercator was part of hackathon.lu 2026, organised by CIRCL on April 14th and 15th in Luxembourg. This annual event brings together developers and practitioners around concrete open-source cybersecurity projects — exactly where Mercator belongs. Over two days, we built and integrated a connector between Mercator and CPE Guesser, the CIRCL tool that automatically identifies CPE identifiers from a software component’s name and version. A missing link between application inventory and vulnerability exposure. Mercator × CPE Guesser: from inventory to vulnerability in one click By: Didier Barzin Mercator developer — Sourcentis April 2026 ...

Excellent lessons learned from David Savary (University of Tours) on an often overlooked topic: the resilience of the application mapping itself. When the network goes down, that’s precisely when the mapping becomes critical… and yet often inaccessible. The solution presented is simple, pragmatic, and effective: automated Mercator exports, enriched by queries, stored offline via Nextcloud, and directly aligned with the institution’s Disaster Recovery Plan (DRP). Result: an operational mapping in a crisis situation, usable even without a functional IT system. This is exactly what we expect from a mature security approach. ...

We talk about Information System Mapping on NoLimitSecu. 🎙️ A great opportunity to discuss information system mapping, its challenges, and its use cases. 👉 Listen to the episode online (in French):

🎥 The presentation of Mercator, our Open Source tool for IT system mapping, given at Voxxed Days Luxembourg, is now available online! What’s inside: ✅ Why mapping your information system matters ✅ Tangible benefits for security, urbanization, and compliance ✅ And most importantly, a live demo of Mercator, showcasing its dynamic visualizations, collaborative approach, and integration within a DevSecOps ecosystem Huge thanks to the Voxxed Days team for the organization, and to everyone who joined the discussion after the talk 🙌 ...

📢 New Framework Available in Deming: HDS Good news for healthcare professionals and health data hosting providers! The HDS framework (Hébergeur de Données de Santé) is now integrated into Deming, our open source tool for managing Information Security Management Systems (ISMS). 🎯 Why It Matters The HDS framework applies to all organizations that host personal health data. It introduces strict requirements for security, traceability, and governance, complementing standards such as ISO 27001 and ISO 20000. ...

🎉 New Deming Release is Out! This new version brings several important improvements: 🚀 Technical enhancements Updated to the latest version of Metro UI for a more modern and responsive interface Web components now packaged with npm, making the architecture more modular and maintainable 🔐 New features User group management: easier permission assignment and role structuring 🐛 Bug fixes Multiple bug fixes to improve stability and overall user experience ⚠️ Known issues ...

The implementation of the European directive NIS2 is fast approaching. I’m pleased to be speaking at the NISDUC conference on May 6th, 2025, where I will present how essential and important entities can implement the security measures required by NIS2 through an open source approach with Deming. 👉 The title of my talk: “NIS2 – An Open Source Approach with Deming”.

🚀 Ready to take your IT mapping skills to the next level? Join us at BSides Luxembourg 2025 for a unique and practical session: Mapping Your Information System with Mercator: A Hands-On Workshop, on June 19, 2025, from 10:00 to 12:00! In an era where IT environments are growing more complex every day, having a clear and accurate view of your system architecture is more critical than ever. Mercator, our award-winning open-source tool, empowers you to model, visualize, and analyze your IT ecosystem with ease and precision. ...