We want to build a cyber-secure digital world by safeguarding the future against evolving cyber threats.
- SM Cybersecurity Oy
The three statues represent the three foundations of our operations and guide us toward our vision - From Finland to the World.
Founders of SM Cybersecurity: Stepan Petrov and Miki Khomich
Phone: +358 46 960 0964
Email: stepan.petrov@sm-cybersecurity.com
Stepan had been thinking about starting his own company for a long time. In early 2026, the idea began to take concrete shape: he wanted to build something of his own that was meaningful. After considering various business ideas, his focus shifted to cybersecurity.
The original idea was simple: Companies might have security-related issues on their websites that they aren't aware of. Stepan began to wonder if such problems could be identified and if he could help companies fix them.
As the idea developed, Stepan shared it with Miki, and they began to explore what cybersecurity could mean from their perspective.
Phone: +358 44 985 6991
Email: miki.khomich@sm-cybersecurity.com
When Stepan shared his idea in early 2026, Miki didn't jump on board immediately. At the time, cybersecurity was still a relatively unfamiliar topic to him.
However, the subject began to surface elsewhere. Miki encountered it at conferences and presentations, as well as through his work and studies. As he delved deeper, he became interested in cybersecurity, and Miki began to see Stepan's idea as an opportunity to build something together.
At the same time, the original concept began to look broader. Cybersecurity wasn't just about finding individual technical issues; it was a comprehensive whole. This sparked the desire to build SM Cybersecurity together.
SM Cybersecurity helps organizations identify, assess, and manage cybersecurity risks so they can operate, develop, and grow securely in the digital world.
SMC Model
We build SM Cybersecurity’s expertise around a holistic approach to cybersecurity, risk management, and continuous improvement. In our work, we utilize international standards and frameworks, such as ISO and NIST.
For us, standards and frameworks serve as a foundation, not an end goal. They allow us to assess the current state, identify and prioritize risks, and plan concrete development measures. We combine this with our knowledge of cybersecurity, information security, data protection, and risk management to ensure that an organization's security can be developed in stages and on an ongoing basis.
Trust is the core value of SM Cybersecurity.
Our clients must be able to trust that we know our business, act responsibly, and keep our promises. We build trust through transparency, well-founded solutions, and responsible operations.
01 Trust
Trust is created when a client has a sound reason to rely on us. We are transparent about what we do and why, we act responsibly, and we are honest about even the most difficult findings.
02 Professionalism
We operate systematically, according to agreements, and responsibly. We adhere to agreed-upon procedures, schedules, and quality standards.
03 Expertise
Trust requires the ability to deliver on what we are trusted with. We combine expertise from various areas of cybersecurity to meet our clients' needs and continuously develop our skills.
04 Continuous improvement
Trust does not mean that everything stays the same. We learn from projects and feedback, monitor the changing threat landscape, and evolve our operations accordingly.
The story of SM Cybersecurity didn't begin with a finished company or a grand master plan. It started with the simple desire to build something of our own.
Stepan had been thinking about starting his own business for a long time. In early 2026, the idea began to take shape as he started considering what kind of company was truly needed. He became particularly interested in cybersecurity because companies handle vast amounts of data, yet the risks associated with protecting that information often go unnoticed until it's too late.
The original concept was simple: audit a company's website, identify potential security vulnerabilities, and help fix them. If no significant issues were found, the client wouldn't be charged for the audit.
At first, Miki didn't join in. He was studying at Turku University of Applied Sciences, and starting a business didn't feel like the right move at the time. However, Stepan's idea stayed with him.
Around the same time, Miki began encountering cybersecurity in other contexts. He heard about it at conferences and presentations and learned more through his work. The more he delved into the subject, the more his interest grew. Eventually, Miki decided to take Stepan up on his offer.
As Miki began to study cybersecurity in earnest, it quickly became clear that the subject was much broader than the original idea. It didn't make sense to view cybersecurity merely as a one-off technical audit.
Through his research, it became evident that cybersecurity is not just a technical issue. It involves people, processes, management, and continuous improvement. Consequently, the original business idea began to expand.
The focus shifted from finding individual problems to looking at the big picture: where an organization stands now, what risks it faces, and what steps it should take next.
This deeper dive also highlighted another problem: cybersecurity is often misunderstood, and many don't know what steps to take to improve it.
If a subject is unfamiliar, it's difficult to recognize it as an integral part of one's own operations. This often leads to organizations only waking up to problems after something has already gone wrong.
Ignorance and indifference can be risks in themselves. We wanted our work to address exactly this.
We wanted to make cybersecurity more understandable and help organizations see what they need to consider in their own operations. The goal wasn't just to find problems, but to help them understand why those problems matter and what to do about them.
This philosophy became the foundation of how SM Cybersecurity operates.
Finland was a natural place for us to start.
We have both grown up and lived in Finland, so it was only natural to begin building the company here.
However, the goal was never to build a company just for Finland. We wanted to create a foundation in Finland that could be developed and eventually expanded beyond its borders.
Finland was the beginning, not the limit.
