Security assessments of self-hosted open-source platforms such as Keycloak, GitLab, Nextcloud, Odoo, Moodle, Drupal, Wazuh and Kubernetes, checked against each project's own hardening and security guidance.
Review and testing of a self-hosted Keycloak deployment: realm and client configuration, admin console exposure, token and session settings, identity brokering, reverse proxy rules and TLS, against Keycloak's production guidance.
Assessment of a self-managed GitLab instance against GitLab's five hardening areas: instance settings, runners and CI/CD variables, gitlab.rb configuration, the operating system and how far the instance lags GitLab's patch release cycle.
Review and testing of a Nextcloud server: supported version status, apps installed, sharing and external storage settings, authentication and the admin manual's hardening guidance, for organizations hosting files on their own infrastructure.
Assessment of an on-premise Odoo deployment: reverse proxy and TLS setup, database manager exposure, access rights and record rules, custom modules and Odoo's public deployment security checklist.
Review and testing of a self-hosted Moodle site: version and patch status against Moodle security announcements, plugins, roles and capabilities, authentication methods and site configuration.
Assessment of a Drupal site: core and contributed module status against Drupal Security Team advisories, modules without advisory coverage, custom code, permissions and server configuration.
Review of how a Wazuh SIEM and XDR deployment is secured: default credentials, certificates for server, indexer and dashboard, API exposure, RBAC and agent enrollment, so the security tool does not become an entry point.
Review of a Kubernetes platform an organization runs itself, on premises or air-gapped: control plane and etcd hardening, operators and add-ons, Pod Security Standards, ingress and the CIS Kubernetes Benchmark; differs from the managed cluster assessment in the cloud category.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.