Roari Solutions[Engagement: assessment, hardening or response]
[What was found or fixed, and the result.]
Case study to come
Services
Assess, harden, monitor, respond. Then assess again.
Six services, in the order an engagement usually runs. Start at whichever stage you are at: an assessment before launch, or a call in the middle of an incident.
-
Assess
Find out where the organisation is exposed, and what it has to comply with.
- Security assessmentPenetration testing, vulnerability scans, audits.
- ComplianceFrameworks, policies, audit readiness.
-
Harden
Close what the assessment found, and build new systems so it stays closed.
- Infrastructure hardeningNetwork, server, cloud and endpoint.
- Secure developmentCode review, delivery lifecycle, app security.
-
Monitor
Watch for whatever still gets through, around the clock.
- Monitoring & SOCDetection, logging, round-the-clock setup.
-
Respond
Contain it, find out what happened, and recover.
- Incident responseContainment, forensics, recovery.
What a response teaches goes into the next assessment.
Principles
How we work inside someone else's systems.
The rules the security practice holds itself to on every engagement.
Test it the way an attacker would.
Assessments look for the weakness someone else would find first, not only the ones a checklist expects.
A finding isn't closed until it's retested.
Every fix is checked again before it comes off the list, so the report describes the system as it is now.
Built in, not bolted on.
Security shapes how our own platforms are designed, written and delivered. It is not a review at the end.
Your team keeps the keys.
Access, credentials and documentation stay with the client, and the people who run the systems are trained to use them.
Past projects
Assessments, hardening and responses we can point to.
[Engagement: assessment, hardening or response]
[What was found or fixed, and the result.]
Case study to come[Engagement: assessment, hardening or response]
[What was found or fixed, and the result.]
Case study to come
Case studies are being written up. Until they are published, ask us for references.
Contact
Tell us what you need protected.
Email Aymen Ibraheem with a line on the organisation and what it needs.