We provide experienced security consultants for project work — remote across the DACH region, the EU and worldwide. The consulting builds on the same assessments our attack surface and SIEM analyses deliver and brings the findings together into a coherent security concept — with architectures, processes and measures that hold. For organisations with their own SOC, a small team, or no security staff at all.
Zero trust architectures, network segmentation and tiering, identity & access management, passwordless (FIDO2, Windows Hello), PKI, Active Directory hardening.
Design and build of SIEM architectures for organisations without an existing SIEM, building and leading security operations centres, use case design, incident detection & response, threat hunting.
Identification, assessment and prioritisation of vulnerabilities — including the results from attack surface monitoring.
Pragmatic implementation and development of an ISMS to ISO/IEC 27001; mapping to NIS2, KRITIS (§ 8a BSIG), DORA/BaFin (BAIT, MaRisk) and BSI IT-Grundschutz.
Secure architectures for AWS, Azure and Kubernetes; container security, CI/CD, infrastructure as code.
Securing AI-supported and data-driven applications: safe integration, LLM risks, governance.
Framing the current threat landscape and typical attack scenarios, core principles such as zero trust, framework-based approaches for mid-sized companies, definition of the target state.
A structured review of security maturity against defined requirements from ISO/IEC 27001, NIST and best practice — with interviews, document review and implementation checks.
Design, optimisation and technical support of security architectures across IT, cloud and OT domains, along the areas of focus above.
As a service through Graydaxe Cybersecurity GmbH — remote across the DACH region, the EU and worldwide. On request we introduce suitable consultants anonymously.
Yes. Consulting does not require an assessment. If one exists, we build on those facts instead of gathering them again.
Not necessarily. We work with in-house SOCs, with small teams, and with organisations that have no security staff at all.
Intro and Basis have a fixed scope. Standard is billed by effort. Profiles, availability and terms are provided on request.
Let’s decide together on the next step for your cybersecurity.
Some start with an assessment of their attack surface or their SIEM, others go straight to consulting. We’re happy to work out together what fits you.
We look forward to your message and will get back to you personally within 1–2 business days.