Identity and administrative access
Review privileged accounts, directory trust, authentication, service identities, and connections between local and cloud identity systems.
BASTET / SERVICES
On-Premises & Hybrid Security Assessment
Review local infrastructure, privileged access, network segmentation, and connections to AWS and Azure. Prioritize practical security improvements.
What we review and deliver
Infrastructure and network boundaries
Review agreed server and endpoint configurations, administrative access paths, remote access, and segmentation between systems and cloud networks.
Operational resilience
Review patching responsibilities, security logging, backup access, and recovery procedures. Document gaps and prioritized recommendations; recovery exercises are separately scoped.
Starting scope
An agreed environment with a defined set of identity systems, servers or endpoints, network boundaries, and cloud connections. The proposal specifies included systems, available evidence, and review depth. On-site work and recovery testing are included only when explicitly agreed.
Availability, access, integrations, and complexity are confirmed before engagement.
What you receive
- Documented decisions and priorities
- Actionable recommendations with owners
- Technical and executive summary
- English or Spanish handover session
Before we begin
We agree the authorized systems, test scenarios, deliverables, and acceptance criteria in writing. An architecture assessment is not an exhaustive penetration test. Production testing, implementation, and continuous monitoring are included only when explicitly scoped.
Read the assessment method →
NEXT STEP
Request a scoping call ↗
Define the scope before you commit.
Tell us about your environment, risk concerns, and target date.