Security Atelier · Oberhausbergen, France

Old-world diligence for modern infrastructure.

We implement continuous security monitoring systems, rigorous cloud access controls, and compliance-driven risk mitigation policies to protect proprietary infrastructure.

Commission a Risk Review Open the Service Formulary

Live Watch Desk Active

99.98%

Sensor uptime · 90 days

6 min

Median detection

SOC telemetry ingestionNOMINAL
Critical incidents open0
Escalation window< 2 H

Read Today’s Watch Log →

Team Credentials

OSCP / CISSP holders

240+

Audits delivered

A senior bench of forensic analysts, cloud identity engineers, and compliance officers — no junior hand-offs, ever.

Meet Your Responders →

Formulary No. 07 · Security Services

The Service Formulary

Eight calibrated engagements, each with fixed scope, transparent fee, and published turnaround. Every tile opens a direct brief to our intake desk.

Request a Bespoke Scope

01 Monitoring

Continuous Security Monitoring

Round-the-clock telemetry across endpoints, cloud tenancy, and network edges, triaged by a human watch desk.

· 24/7 SIEM correlation & alert triage
· Weekly posture ledger & hardening notes
· Quarterly purple-team validation

Engagement fee $1,200 / month Turnaround · 72-hour onboarding

Request Briefing →

02 Cloud Identity

Rigorous Cloud Access Controls

Least-privilege architecture for AWS, Azure, and Google Cloud with enforced just-in-time elevation.

· IAM role & policy rebuild
· SSO, MFA, and privileged access workflow
· Drift detection on every deployment

Engagement fee $1,450 Turnaround · 10 business days

Request Briefing →

03 Compliance

Compliance Risk Mitigation Programme

ISO 27001, NIS2, and GDPR controls mapped to evidence, owners, and audit-ready documentation.

· Gap analysis against control catalogue
· Policy suite & risk register drafting
· Evidence pack for external auditors

Engagement fee $2,400 Turnaround · 6 weeks

Request Briefing →

04 Offensive

Penetration Testing & Attack Surface Audit

Authenticated testing of applications, APIs, and external perimeter with reproducible exploit evidence.

· Scoped web, API, and infrastructure tests
· Severity-ranked findings with retest
· Executive briefing alongside technical report

Engagement fee $1,850 Turnaround · 10 business days

Request Briefing →

05 Response

Incident Response Retainer

A standing forensic team on call for containment, eradication, and regulator-ready post-incident reporting.

· 15-minute acknowledgement dispatch
· Forensic imaging & timeline reconstruction
· Breach notification drafting support

Retainer fee $750 / month Turnaround · 15-minute dispatch

Request Briefing →

06 Architecture

Security Architecture Review

A design-led examination of trust boundaries, segmentation, secrets handling, and cryptographic posture.

· Threat model per system boundary
· Secrets, key rotation & TLS inventory
· Prioritised remediation roadmap

Engagement fee $950 Turnaround · 5 business days

Request Briefing →

07 Human Layer

Phishing & Security Awareness Programme

Simulated campaigns and apothecary-clear training modules that turn staff into the first sensor layer.

· Monthly phishing simulations
· Role-based workshop for finance & admin
· Reporting scorecard per department

Engagement fee $450 Turnaround · 2 weeks

Request Briefing →

08 Data Protection

Data Protection & GDPR Alignment

Records of processing, transfer safeguards, and retention rules built to satisfy French CNIL scrutiny.

· Data mapping & RoPA construction
· DPIA facilitation for high-risk flows
· Sub-processor & SCC review

Engagement fee $1,100 Turnaround · 3 weeks

Request Briefing →

09 Open Slot

Bespoke Security Commission

Secrets management overhauls, supply-chain hardening, OT/ICS assessments, or board-level tabletop exercises — prescribed to your exact threat profile.

Scoped within 48 hours of intake

Engagement fee From $2,900 Turnaround · agreed at scoping

Describe Your Commission →

Dispensing Protocol

How an engagement is prepared

Intake & Threat Elicitation

We catalogue assets, adversaries, and regulatory obligations before a single control is prescribed.

Days 1–2

Baseline Examination

Configuration capture, access review, and control testing produce an evidenced severity-ranked ledger.

Days 3–7

III

Remediation & Hardening

We implement access controls, monitoring rules, and policy guardrails directly alongside your engineers.

Weeks 2–5

Continuous Watch

Monitoring, drift alerts, and quarterly review keep the posture from decaying between audits.

Ongoing

Direct Commission

Prescribe your next security control.

Send a brief to our intake desk and receive a fixed-scope proposal — fee, timeline, and named responders — within two business hours.

Open the Intake Desk → Read the Governance Matrix

Settlement Ledger

Already engaged?

Retainers and fixed-fee invoices are settled through our encrypted Stripe ledger. You will receive your reference number by email.

Pay Securely Online →