The world of e-commerce security is changing rapidly. Where a firewall and regular updates used to be the standard, the new European NIS2 directive now forces webshops to adopt a proactive stance. For companies with an e-commerce platform, this is no longer optional advice, but a legal necessity.
In this blog, we explain how the collaboration between Ecomwise and Sansec helps you not only comply with the law but also ensure your continuity.
Wat is NIS2 en wanneer gaat het in?
The NIS2 Directive (Network and Information Security) is the successor to the first EU-wide cybersecurity law. Its aim is to strengthen the digital resilience of European organisations.
- When? Although the European deadline was in 2024, the Dutch Cybersecurity Act is expected to enter into force 1 July 2026 officially in effect.
- For whom? Many webshops fall under this, directly or indirectly. Even if you are not directly ‘essential’, larger clients and partners already demand that your cybersecurity is demonstrably in order (the chain of due diligence). Waiting until the law is in place means you will likely be too late with your preparations.
Why cybersecurity is becoming increasingly important (The impact of NIS2)
The NIS2 Directive lays down strict requirements for the security of network and information systems. For your webshop, this specifically means:
- Duty of Care You must demonstrably take “state-of-the-art” measures to minimise risks.
- Supply Chain Security: You are responsible for the safety of the entire chain, including all external plug-ins and libraries in your B2B webstore.
- Reporting requirement In the event of a significant incident, you must report it to the supervisor within 24 hours. Without advanced monitoring, it is virtually impossible to detect a breach in time.
What is Sansec?
Sansec is the global standard in e-commerce security. Unlike general server scanners, Sansec (also known as eComscan) has been specifically developed to address the unique vulnerabilities of platforms such as Magento, Shopware, or WooCommerce. With a database that performs over 50,000 specific checks daily, it detects threats that remain invisible to others.
What does Sansec do (On top of standard updates)?
Many companies believe they are safe as long as they install official security updates from a platform. While essential, this is not always enough. Sansec provides a crucial extra layer:
1. Virtual patching via Sansec Shield
Testing and installing an official patch from, for example, Adobe can take days. During that time, your webshop is vulnerable. Sansec Shield functions as a specific Web Application Firewall (WAF) that blocks attacks on known vulnerabilities directly, even before the patch is installed. We call this virtual patchingDirect protection without the risk of downtime due to updates.
2. Deep Scanning & Forensic Detection
Where standard tools often only look at known malware files, Sansec also scans your database annually/daily for injections and monitors malicious processes in real-time. If an intrusion does occur, Sansec immediately provides the detailed forensic information you need to resolve the problem.
Ecomwise & Sansec: Security as a Foundation
At Ecomwise, we believe security is not a luxury option, but an essential component of any digital landscape. After all, an insecure webshop is a threat to your reputation and your continued existence.
As an official partner of Sansec Can we offer our customers Sansec at a reduced rate? We'll take care of the management and monitoring, so you can focus on growing your business, while we keep the back door securely locked.