Who we help
Platform and SRE teams
Security for the teams who build and run your platform. Our engineers work in your repositories and pipelines, where platform security actually lives.
Talk to usSecurity questions need engineering answers
Your platform teams inherit the security backlog of hardening the clusters, evidencing the controls, satisfying the auditor, and keeping every tenant happy while they do it. Security policies often do not reflect the realities of the estate that the platform team is maintaining, with a request for controls that don't fit in with your engineering practices.
Our consultants are platform engineers, and we deliver our work as pull requests, admission policies, pipeline stages and paved road defaults, built alongside your team so you can continue working when we leave.
We have case studies for our security architecture and engineering across numerous clients, including Citigroup, Marshall Wace and JP Morgan Chase.
What platform teams bring us
A hardening backlog that competes with every feature request on the roadmap
Controls that must be evidenced without slowing the deploy cadence the organisation is used to
Identity and secrets plumbing that predates the platform and does not map to workloads
Multi-tenant clusters where one team's mistake is everyone's incident
Audit findings phrased in framework language that someone has to translate into configuration
How we help
The work platform teams most often pull us into.
Secure-by-default platform build: paved roads, guardrails and golden paths that make the safe way the easy way.
Pipelines with signing, verification and policy enforcement built in, so provenance is a property of every release.
Identity that maps to workloads rather than hosts, and secrets managed as platform infrastructure.
We employ Flux maintainers and ship Enterprise for Flux CD: supported, hardened GitOps for platforms where the deploy path is critical infrastructure.
Hands-on Kubernetes and container security courses, taught by the consultants who do the engagements.
Engagements built with platform teams
Three published examples of this work in production estates.
Citigroup: Security Architecture and Engineering for EKS
How a multinational bank leveraged the benefits of managed Kubernetes with cloud native secure-by-design principles
Marshall Wace: Active Directory and Kubernetes Workload Integration
How a hedge fund seamlessly migrated on-premises Active Directory (AD) infrastructure into their new cloud native Kubernetes platform
JP Morgan Chase: Independent Security Assurance Using EKS
How a leading Financial Services Organisation securely unlocked Kubernetes in AWS using EKS
Speak to an expert
Engage with world-leading AI and cloud security specialists