Security architecture review
Assessment of cloud accounts, networks, identities and data flows against CIS Benchmarks and the cloud providers' well-architected frameworks.
Cybersecurity for cloud, data and applications
We build security into your cloud platforms, data and applications through secure architecture, audits, penetration testing and compliance support for ISO 27001, GDPR and NIS2.
What we do
Scope of work
Penetration testing
Tests of web applications, APIs and cloud configurations based on the OWASP methodology, with a report and a retest after fixes.
Cloud security hardening
Identity and access management, network segmentation, encryption, key management and security monitoring on AWS, Azure, Google Cloud, OVHcloud, Hetzner Cloud, UpCloud and private clouds.
Secure development lifecycle
Threat modelling, static code analysis, dependency and container scanning and secret detection built into CI/CD.
Compliance support
Gap analysis and technical controls for ISO/IEC 27001, GDPR, NIS2 and DORA, including evidence for auditors.
Technologies
Typical technologies
We are not tied to any single vendor: we work on public and private clouds and adapt to your environment, licences and team skills. These are the tools we use most often in this area.
Cloud platforms
- AWS
- Microsoft Azure
- Google Cloud
- OVHcloud
- Hetzner Cloud
- UpCloud
- OpenStack
- VMware
- Proxmox VE
Cloud security
- Prowler
- Checkov
- Falco
- Trivy
- Microsoft Defender for Cloud
Identity and secrets
- Keycloak
- Microsoft Entra ID
- Okta
- HashiCorp Vault
Security testing
- OWASP ZAP
- Burp Suite
- Metasploit
- Nmap
- Semgrep
- SonarQube
Security monitoring
- Wazuh
- Elastic Security
- Microsoft Sentinel
- Splunk
- Graylog
Related services
Often combined with this service
- AWS
- Microsoft Azure
- Google Cloud
- OVHcloud
Cloud Maintenance & Operations
Managed operations of your cloud environments: 24/7 monitoring, patching, backups, upgrades and incident response.
- React
- Next.js
- Angular
- Vue.js
Application Development
Custom web, backend and data applications designed, built and tested by experienced BCF teams.
- AWS
- Microsoft Azure
- Google Cloud
- OVHcloud
AI Infrastructure
GPU-ready, secure and cost-controlled infrastructure for training, serving and monitoring AI models.
Let's talk about your project
Tell us where you are today and what you want to achieve. We will suggest a concrete first step, and we can sign an NDA before any technical discussion.