01
Credential security
We keep passwords, keys and other credentials in secure stores. We configure which applications and users can use them so they are not left exposed in code or configuration.
Security
We address security from the first design.
Who can access your data, what AI is allowed to do and how the system responds to an attack. We address these questions during design and development. Our subsidiary comma0 helps with audits, risk management and monitoring.
What we secure
Application and cloud infrastructure security
02
Network and communication security
We separate parts of the network and allow only the connections applications need. We connect internal services privately so they do not need to be accessible from the internet.
03
Secure cloud infrastructure scaling
We configure access, communication and application runtime rules in Kubernetes. The same rules apply to new instances as workloads grow.
04
Software security checks
We check the external libraries and other software components applications use. Configured rules determine which components developers and automated tools can download.
Powered by Shieldoo Gate05
AI security and access control
We configure which data AI can access based on the signed-in user’s permissions. We also define which queries and responses are recorded. We work with comma0 to assess additional security requirements.
06
Secure application deployment
Before deployment, we automatically check components for known vulnerabilities and code for exposed passwords or keys. Releasing a new version depends on passing the agreed security checks.
What we'll do for you
From design to second opinion
01
Security architecture
Solution design based on Zero Trust principles: identity, network, encryption, key management and logging. We work with comma0 on requirements, risk management and documentation.
02
Code and architecture review
We review code and design, describe identified security risks and recommend which fixes to prioritise by risk impact and remediation effort. This helps you direct your budget towards the most important measures. We also assess systems built by other providers or before launch.
03
DevSecOps and CI/CD
Security checks as part of the pipeline: dependency and image scanning, secret detection, SBOM, artifact signing. We set it up, train your people and hand it over.
04
Security of AI solutions
Assessment of AI Act requirements, rules for query and response records, access permissions and environment selection based on data location and processing requirements.
05
Software supply chain protection
We configure package and container image checks between your registries and dependency download tools. We adapt the rules to your development and operations.
Powered by Shieldoo Gate06
Embedded and payment security
We have developed payment terminals and applications for PKI and certificate management running in the cloud and at end customers. We have experience with HSMs and development for payment environments with PCI requirements.
Subsidiary
When you need specialists: comma0
comma0 is our cybersecurity subsidiary. Together, we cover technical design, risk management, security testing and operational monitoring. We agree the division of work for each project.
GRC
Processes, policies and risk assessment. Assessment of relevant ISO 27001, ISO 22301, DORA, NIS2 and NIST requirements, proposed measures and audit documentation.
SOC
Round-the-clock monitoring with SIEM and SOAR, incident detection, response and support for service recovery.
Red Team
Simulated real-world attacks against your defences. Find the weak spot before someone else does.
Security architecture
Infrastructure design based on Zero Trust principles, with technologies selected to suit the project’s needs.
Do you know where your system is vulnerable?
Let's talkContact us
Where could IT save you the most?
Tell us what costs you the most time, money or operational effort. Together, we will choose a first step and a way to measure its benefits.
info@cloudfield.cz