Untracked privileged access
Administrators and contractors work on critical servers without oversight.
EXPERTISE · CYBERSECURITY & TRUST
Trust is built
in the details.
Identity and access, privileged access, incident detection, infrastructure security and compliance.
WHY IT’S CRITICAL
Digitalisation without security is not transformation. It’s a risk.
Every API, every channel, every connected partner is an entry point. We build security in from the design stage: identity management, privileged access control, incident detection, infrastructure hardening.
And we help you demonstrate compliance to the supervisory authorities.
THE CHALLENGES
What we
often hear.
A growing attack surface
APIs, mobile channels, partners: so many doors to protect.
Compliance to demonstrate
BCEAO, Banking Commission, data protection: the burden of proof lies with you.
WHAT WE DO
What we
take on.
Services that combine to fit your context, from scoping to operations.
Identity and access
Single sign-on and end-to-end authorisation.
- Keycloak, OAuth 2.0, OpenID Connect
- SSO and strong authentication
Privileged access
Track and control administrator and contractor access.
- Wallix Bastion
- Session recording
Detection and response
Real-time incident detection.
- Wazuh SIEM/XDR
- Elastic Stack
Audit and risk analysis
Diagnosis, testing and a prioritised security plan.
- Risk analysis
- Penetration testing
Infrastructure security
Firewalls, segmentation, hardening, secrets management.
- OPNsense, OpenVPN
- HashiCorp Vault
Compliance and secure development
Regulatory support and security across the development pipeline.
- BCEAO, PCI-DSS, ISO 27001
- SAST and DAST
OUR APPROACH
How we
work.
Assess risks
Critical assets, threats, vulnerabilities.
Risk mapPrioritise
Measures ranked by impact and effort.
Security planSecure
Deployment of measures and tools.
Measures in placeMonitor
Detection, response, continuous improvement.
Security reportsWHAT YOU GET
Deliverables
you can verify.
Scope, responsibilities and acceptance criteria are defined during scoping.
Diagnosis and risk mapShared with management.
Prioritised security planCosted and scheduled.
Measures deployed and documentedWith evidence of compliance.
Security monitoring reportsPeriodic.
REFERENCES
On the ground,
in production.
ONECI PRODUCT · DESIGNED BY SYNELIA
ONECI Connect: identity verified at the source
Biometric authentication backed by the National Register, with no biometric data stored outside ONECI’s perimeter.
The platform →CybersecurityBanking & telecoms · multi-country
Controlling privileged access
Track and control administrator and contractor access to critical systems.
IdentityOrange · Liberia
Digital KYC
Customer identity verification platform, in operation.
TECHNICAL ENVIRONMENT
Technologies
we master.
Around thirty open-source and vendor solutions, chosen to fit your context. Technologies are confirmed during scoping.
Identity
- Keycloak
- FreeRADIUS
- OAuth 2.0
- SAML
Access and detection
- Wallix PAM
- Wazuh
- Elastic Stack
Infrastructure
- OPNsense
- HashiCorp Vault
- Trivy
- Falco
FREQUENTLY ASKED QUESTIONS
What we’re
often asked.
Where do we start?
With a risk assessment of your most critical assets, so measures can be prioritised by their real impact.
Are your tools open source?
We make extensive use of proven open-source solutions (Keycloak, Wazuh), and vendor solutions where they are a better fit (Wallix).
Do you support regulatory audits?
Yes: preparing evidence, documenting measures and supporting you during inspections.
GO FURTHER
Expertise
to explore.
GETTING STARTED
A clearly defined
first step.
WHEN TO CALL US
An upcoming regulatory audit, an incident, a client requirement or exposure to reduce.
FIRST ENGAGEMENT
A maturity assessment and gap analysis, starting with our free self-assessment.
INDICATIVE DURATION
15 minutes online, then 3 to 6 weeks
WHAT WE NEED FROM YOU
A security contact and access to existing policies and configurations.