Context and scope
Engagements combining infrastructure security, Web application security, secure development, architecture and governance.
Work performed
- Infrastructure and identity: segmentation, flows, VPN, Linux/Windows hardening, AD and privileges.
- AppSec: analysis of Web vulnerabilities, dependencies, requirements and secure development practices.
- Risk: contextualise findings, prioritise and propose technical and organisational measures.
- Validation and handover: document controls, remediation, relevant retests and operating procedures.
Documented deliverables and outcomes
Architectures and recommendations; technical reports; treatment and remediation plans; operations and handover procedures.
Scope of outcomes
The reviewed public documents describe the work and deliverables above. They do not provide a quantified before/after series supporting a risk-reduction percentage here.
Methods and tools
Security by Design · OWASP · ISO 27001 / 27005 · EBIOS RM · Secure Development
Public scope
Client data, exploitable configurations and proprietary mechanisms remain excluded from this presentation.
Last reviewed: 26 October 2026
Discuss this work