Hors-Cloud

Security

Security of systems, access, and keys.

Hors-Cloud handles the incident, hardens the service, and puts secrets where they belong: a vault, an identity provider, sometimes a hardware module.

Engagements.

Incident

Assessment, copy, containment, evidence kept. Restoration follows your approval.

Hardening

Accounts, exposed surfaces, updates, isolation of services.

Identity

OpenID Connect, roles, administration access kept apart from public access.

Signatures

Signed images and artefacts, so you know what is allowed to run.

Hardware keys

HSM and PKCS#11 for keys that must not remain a file: certificates, signatures, failover between nodes.

Review

A reading of an architecture or a deployment before it reaches production.

Facts on one side, hypotheses on the other.

A report states what is established and what is still a lead. Access details are not copied into a document that circulates.