“It is reassuring to know that someone is continuously monitoring our environment. We know who to call if something happens, and we know we can expect a rapid response. That gives us confidence in our day-to-day operations.”
— Torkel Rogstad, Co-Founder, Bare Bitcoin
Bare Bitcoin is a Norwegian platform for buying, selling, storing, and sending bitcoin. Built around simplicity and security, the company serves thousands of customers who trust the platform to safeguard assets ranging from modest savings to significant investments.
Protecting customer funds is at the core of the business. While security is only one of several layers that contribute to this responsibility, maintaining strong security hygiene across the company’s digital infrastructure is essential.
River Security supports Bare Bitcoin through Active Focus and tailored DORA advisory services, providing continuous security validation and helping strengthen operational resilience in a regulated environment.
The collaboration began in 2024 with a Proof of Concept. Following strong results and a successful partnership, Bare Bitcoin recently renewed the collaboration through a new two-year agreement.
An Extra Set of Eyes
Security has always been a priority for Bare Bitcoin.
The team invests significant effort into securing its own environment, but recognized the value of having an independent partner continuously validating its security posture.
Rather than replacing internal expertise, Active Focus provides an additional layer of assurance by continuously identifying exposures, validating findings, and helping ensure nothing important is overlooked.
For Bare Bitcoin, that continuous validation provides confidence that security is being challenged from an external perspective every day.
Continuous Security Validation
Through Active Focus, Bare Bitcoin receives continuous visibility into its external attack surface and internet-facing assets.
Rather than relying solely on periodic penetration tests, Active Focus combines attack surface management, continuous security testing, exposure validation, and structured follow-up throughout the year.
As new assets, technologies, and services emerge, they are continuously assessed to determine real-world risk and business impact.
This enables Bare Bitcoin to identify and address meaningful exposures before they become incidents while maintaining an up-to-date understanding of its external security posture.
Supporting DORA Readiness
As a regulated financial services provider, Bare Bitcoin must continuously strengthen its operational resilience and security governance.
To support this work, River delivered tailored DORA-focused security training designed specifically for Bare Bitcoin’s organization.
Combined with Active Focus, the collaboration supports several of the objectives described in DORA Articles 25 and 26 by contributing to continuous testing, identification of weaknesses, validation of security controls, and improved operational resilience.
Beyond compliance, the training has provided practical guidance that helps strengthen the organization’s overall security maturity.
A Trusted Security Partner
For Bare Bitcoin, one of the greatest values lies in knowing that security never stands still.
Continuous monitoring, rapid access to security expertise, and trusted guidance provide confidence that potential issues will be identified early and addressed quickly.
The result is not only improved security, but greater peace of mind for a business where trust is fundamental.
“Protecting customer assets is our highest priority. Having an experienced security partner continuously validating our environment gives us additional confidence that we’re doing the right things and reacting quickly when needed.”
— Torkel Rogstad, Co-Founder, Bare Bitcoin
Built for the Long Term
What started as a Proof of Concept has developed into a long-term partnership.
Following a successful first year, Bare Bitcoin renewed the collaboration through a new two-year agreement, reflecting both the value delivered and the trust built along the way.
By combining continuous security validation with practical regulatory advisory, River helps Bare Bitcoin strengthen both its security posture and its ability to operate confidently in a highly regulated industry
Facts
Bare Bitcoin is a Norwegian platform for buying, selling, storing, and sending bitcoin. The company focuses on providing a simple, secure, and transparent experience for individuals and businesses investing in digital assets.
