Project
A defined outcome such as a Sentinel deployment, an Active Directory hardening or an exposure assessment, delivered and handed over.
Cibera Security
We stop attacks, then fix what let them in.
Incident response, security operations on Microsoft Sentinel and Defender XDR, identity and infrastructure hardening, and threat intelligence. Delivered by engineers who have run security operations centres and handled ransomware in banking, telecoms, pharma and the public sector.
- 15+
- years in enterprise IT and security
- 5
- working languages: English, Portuguese, Czech, Polish, Spanish
- 1 day
- reply time on business days
Services
What we do
Engagements are scoped to a problem you have now, priced up front, and finish with your team able to run what we built.
-
01
Incident response
Get help →Containment, forensic investigation and recovery from ransomware and account compromise, with plain-language updates for management, insurers and regulators.
-
02
Security operations
Details →Deploy and tune Microsoft Sentinel and Defender XDR, write detections that catch real attacks, automate triage, and design or reorganize your SOC.
-
03
Identity and infrastructure hardening
Details →Close the gaps attackers use most: Entra ID and Conditional Access, Active Directory, Windows Server and hybrid Azure, with a vulnerability management programme that sticks.
-
04
Assessments and compliance
Request →An honest review of where you stand and a prioritized roadmap that maps to the frameworks your auditors and customers ask about.
-
05
Fractional security lead
Request →Part-time senior leadership for strategy, tooling decisions and building a team, for organizations that need the experience before they need a full-time hire.
-
06
Cibera OSINT
Explore →Our threat intelligence platform. Monitors vulnerabilities, ransomware claims, leaks, lookalike domains and your attack surface, and alerts you with the evidence attached.
Cibera OSINT
Know when your name shows up somewhere it shouldn't
The platform our analysts use, available to your team on a subscription, or run for you as a managed service.
- Lookalike domains, exposed services and breaches for the domains you own
- Known exploited vulnerabilities, ransomware claims and indicators, with the original source
- Watchlists and alerts by email or Telegram, plus a TAXII feed for your SIEM
How we work
Three ways to engage
Start with a free 30-minute call. You get a written scope with a fixed or capped price before any work starts.
Retainer
Reserved response and engineering hours each month, agreed contacts and a response plan prepared before you need it.
Managed
We operate it for you: threat monitoring on Cibera OSINT, or triage of your Microsoft security alerts, with monthly reporting.
Experience
Built inside large security operations
Our work comes from leading cyber defence centres, incident response teams and infrastructure for organizations where outages and breaches are not an option.
Sectors
- Banking and financial services
- Telecommunications
- Pharmaceuticals and industrial systems
- Healthcare and public sector
- Consulting for enterprise clients
Technology
- Microsoft Sentinel and Defender XDR
- Entra ID and Microsoft 365 security
- Palo Alto Cortex XSIAM
- IBM QRadar SIEM and SOAR, Splunk, Tanium
- Active Directory, Windows Server, Azure
Practices
- Tierless SOC and 24/7 on-call models
- Detection engineering in KQL
- Ransomware response and crisis management
- Dark web, leak and OSINT intelligence
- Vulnerability and patch programmes
Talk to an engineer, not a sales team.
Tell us what is going on. We reply within one business day, sooner for active incidents.