One Address to Rule Cybersecurity: What You Need to Know About Poland's New cyber.gov.pl Portal

Poland's Cyber Defense: Between a Public Shield and a Hidden Sword

Poland's cyber defense has two faces. On one side is the new official website, cyber.gov.pl, built to cut through information chaos and give citizens free tools. On the other, behind closed office doors and in server rooms, an intelligence game is underway, and Poland has for the first time officially acknowledged that it has offensive "cyberweapons."

Data leaks and phishing make the news every day. According to the Ministry of Digital Affairs, the number of incidents handled in 2025 rose to more than 220,000, an increase of over 100% year over year. In response, the government is building a security architecture far more complex than the headlines suggest. Here is how this two-sided approach works in practice, from tools any ordinary citizen can use to a deterrence strategy that rarely makes the news.

1. Two Faces of the System: Who Holds the Keys?

To understand Polish cybersecurity, you have to see that it is deliberately split into an open (civilian) zone and a classified (state) zone. This is more than bureaucracy. It is a core part of the country's defense strategy.

• The Public Layer (Ministry of Digital Affairs & NASK): This is the "light side of the Force." Its job is education, building public resilience and providing tools such as the cyber.gov.pl portal. Its focus is the cyber hygiene of citizens and businesses.
• The State Security Layer (CSIRT GOV & ABW): This is the state's "nervous system." The team does not report to the digital affairs ministry. It reports to the Head of the Internal Security Agency (ABW). Here, cyberattacks on critical infrastructure are not treated as technical glitches. They are treated as possible espionage or hostile acts by foreign states.

The key difference: Because CSIRT GOV sits within the counterintelligence structure (ABW), a serious incident in the government sphere immediately brings investigative and attribution capabilities into play. That is a strategic advantage over purely civilian models.

2. A Shield for Citizens: What Is cyber.gov.pl?

Because threat information was scattered across many sources, the government launched the cyber.gov.pl portal. It is meant to be "one address" for getting a handle on disinformation and cyber threats. Instead of looking for help on online forums, citizens and businesses are supposed to find verified information in one place.

The portal is divided into sections aimed at specific audiences:

Target audience	What the portal offers
Citizens	Data protection guides, fraud alerts and educational content (e.g., how to create strong passwords).
Businesses	Guidance on securing corporate infrastructure and maintaining business continuity.
Institutions (KSC)	Incident reporting tools, compliance guidelines for the NIS2 Directive and access to the S46 system.

Free Tools That Actually Work

The portal's biggest strength, which even skeptics acknowledge, is its set of practical, free tools. Many were developed by CERT Polska, and they help users act on the advice instead of just reading it:

• moje.cert.pl: Check whether your email address and password have been leaked online.
• Artemis Scanner: A tool that scans websites and servers for security vulnerabilities (for administrators).
• Bezpieczna Poczta (Secure Mail): Checks suspicious messages and attachments.

3. A Crack in the Glass: Controversy and Criticism

Although cyber.gov.pl is a step toward a more organized ecosystem, some experts have been unimpressed. The official line describes a "centralized platform," but critics point to its "minimalism and superficiality."

The main criticisms concern:

1. Functionality: Instead of integrating services, many tabs simply redirect to other government websites, some of which are out of date.
2. Political purpose: Some argue the portal may serve to "build a facade of readiness" and shape public perception, creating an illusion of security while the real problems lie deeper.

The distance between the promise of a "trusted platform" and accusations that it is a facade creates a trust gap, and that gap is dangerous in a crisis.

4. From Defense to Offense: Poland's "Cyberweapons"

The most surprising piece of the puzzle, and one that rarely gets attention, is the shift in Poland's military doctrine.

In an interview with Puls Biznesu, the Minister of Digital Affairs officially confirmed that Poland has offensive "cyberweapons." This is a fundamental shift:

• A move from a passive (defensive) posture to active Integrated Deterrence.
• A public statement that Poland can retaliate against an adversary's infrastructure if Polish networks, such as water or power systems, are attacked.

Poland is sending a clear signal to allies and adversaries alike: we will not just be a shield. We are ready to make attackers pay a real price, operating across the full spectrum of cyber conflict.

Conclusion: Where Are We Headed?

Poland's cyber defense is a complex mechanism. On one hand, the state is reaching out to citizens through cyber.gov.pl and giving them tools for basic protection. The initiative is needed, but it still needs work and better integration (e.g., with the National Node, Węzeł Krajowy). On the other hand, behind the scenes, ABW and CSIRT GOV are sharpening a digital sword, ready for offensive operations most of us will never hear about.

In the years ahead, security will depend on more than the strength of our secret cyberweapons. Above all, it will depend on whether the public "shield," made up of an informed society and reliable e-services, holds up.

Aleksander

Sources and Further Reading

1. Ministry of Digital Affairs launches cyber.gov.pl with key cybersecurity updates | Biznes PAP
2. Poland has 'cyberweapons,' can strike back, digital minister says - Polskie Radio
3. Cyber.gov.pl - The official government cybersecurity website
4. CERT Polska - Tools and Services
5. ABW - Internal Security Agency
6. National Cybersecurity System (KSC) - Gov.pl
7. NIS2 Directive - European Commission
8. Integrated Deterrence in Cybersecurity - NATO Review
9. Ministry of Digital Affairs launches cyber.gov.pl with the most important cybersecurity announcements
10. Krzysztof Gawkowski: We have cyberweapons, we're working on a digital tax, and within two years we'll introduce online vehicle registration

FAQ

What is cyber.gov.pl and who is it for?

It is the government's central portal, bringing together cybersecurity information for citizens, businesses and institutions. It is meant to be "one address" for verified information about threats and protective tools.

What free tools does the portal offer?

The main ones are moje.cert.pl (checks whether your passwords and email addresses have leaked), the Artemis Scanner (finds vulnerabilities in websites) and Bezpieczna Poczta, or Secure Mail (checks suspicious messages).

Does Poland have offensive cyberweapons?

Yes. The Minister of Digital Affairs officially confirmed that Poland has offensive capabilities and can retaliate against an aggressor's infrastructure if Polish critical systems come under cyberattack.

What is the difference between CSIRT GOV and CERT Polska?

CERT Polska (NASK) works in the public and educational layer, providing tools for citizens and businesses. CSIRT GOV reports to the Internal Security Agency (ABW), protects the state's critical infrastructure and operates in the counterintelligence sphere.