XpertOne Security Consulting GmbH — Enterprise Open-Source Network Security Hamburg

Every engagement follows this sequence

How we work

01
Audit

Conduct a risk assessment to identify potential security threats and vulnerabilities.
02
Plan

Evaluate the likelihood and impact of identified risks and plan short term mitigation.
03
Design

Design the network security architecture and create best practices procedures to reduce the recurrence of future incidents.
04
Implementation

Deploy the security infrastructure and the train the operation team.
05
Go LIVE!

Conduct a final review of the project to ensure all objectives are met and handover to operation team

Open-source · On-site · Documented

The Atlas Platform

Ten products in four dependency layers. Deploy any one standalone, or the full stack as a single engagement — either way you own the configuration and run it without us. Regulatory mapping is tagged per product below.

Pillar 1 — Baseline

ATLAS-COR Foundation / Plus / Enterprise

Atlas Core

PowerDNS · Kea · PKI (step-ca/Vault/EJBCA) · NGINX · OpenCloud · NetBox · Chrony

The foundation every other Atlas product depends on. DNS, certificate authority, reverse proxy, file sync, CMDB, time sync, and patch management in a single coherent stack.

NIS2 Art.21 GDPR Art.25 BSI OPS.1 DORA Art.9

View product

ATLAS-RES Foundation / Plus / Enterprise

Atlas Resilience

Bareos · TrueNAS · S3 · AES-256 · DR runbooks

3-2-1 backup: Bareos schedules jobs, TrueNAS ZFS provides immutable on-site snapshots, encrypted S3 goes offsite nightly. DR runbooks are tested on-site before handover. DORA Art. 12 requires tested recovery — untested backups do not count.

NIS2 Art.21(c) DORA Art.12 BSI OPS.2

View product

Pillar 2 — Security

ATLAS-IDN Foundation / Plus / Enterprise

Atlas Identity

FreeIPA · Keycloak · MFA · RBAC · SAML/OIDC

One identity per user. SSO across all systems. MFA enforced by policy. Leavers disabled in one place, locked out everywhere in seconds.

NIS2 Art.21(i) GDPR Art.32 BSI ORP.4

View product

ATLAS-PER Foundation / Plus / Enterprise

Atlas Perimeter

OPNsense · Suricata IPS · WireGuard · Squid · Greenbone

Deny-by-default firewall. DMZ isolation. Suricata drops exploit traffic inline. WireGuard VPN. Greenbone scans weekly — every new CVE detected within 7 days.

NIS2 Art.21(d) BSI NET.3 DORA Art.13

View product

ATLAS-ACC Foundation / Plus / Enterprise

Atlas Access

FreeRADIUS · PacketFence · 802.1X · EAP-TLS

Nothing gets on the network without authentication. Dynamic VLAN per device type. Unknown devices quarantined automatically. Every connection logged.

NIS2 Art.21(i) BSI INF.1 CRA Annex I

View product

Pillar 3 — Observability & Network

ATLAS-OBS Foundation / Plus / Enterprise

Atlas Observe

Zabbix · Graylog · OpenSearch · Prometheus · Grafana

Outage detected in 60 seconds. SIEM correlates events across all sources. Port scan + failed login = alert in 90 seconds. 90-day log retention for compliance audit evidence.

NIS2 Art.23 DORA Art.17 BSI DER.1

View product

ATLAS-BPR Foundation / Plus / Enterprise

Atlas Blueprint

Architecture design · Hardware leasing · Lifecycle

Professional network architecture before anything is deployed. Hardware standardised and leased — eliminating the CapEx spike. Every VLAN, IP range, and firewall zone version-controlled in Git.

NIS2 Art.21(a) BSI NET.1 DORA Art.9

View product

Pillar 4 — Future Development

ATLAS-WLN Foundation / Plus / Enterprise

Atlas Wireless

MikroTik CAPsMAN · cAP ax / hAP ax³ · WPA3-Enterprise · 802.1X · WIDS

WPA3-Enterprise with certificate auth. VLAN-per-SSID. RouterOS native WIDS triggers a rogue-AP alert within minutes. No shared PSK on the wall.

NIS2 Art.21(d) BSI WLAN.1

View product

ATLAS-VOX Foundation / Plus / Enterprise

Atlas Voice In development

Asterisk · FreePBX · SIP trunks · IVR · SRTP

Software-defined PBX replaces legacy hardware. SIP trunks at current German market rates. GDPR-compliant call recording with consent announcement and automated retention.

GDPR Art.6 NIS2 Art.21(h)

View product

ATLAS-5G Foundation / Plus / Enterprise

Atlas 5G In development

Open5GS · Free5GC · UERANSIM · Indoor RAN · Network slicing

Private 5G SA core on-premises. No public carrier dependency. IoT network slices with guaranteed bandwidth. Sub-10ms latency for industrial applications. Bundesnetzagentur spectrum advisory included.

NIS2 Art.21(d) KRITIS §8a GDPR Art.25

View product

Regulatory coverage: NIS2 DORA GDPR BSI IT-Grundschutz KRITIS CRA

Things we love

Technologies

Security

We design, implement and maintain security infrastructure so your company can best deal with cyber threats.

Networking

We provide the best consulting for your network infrastructure for most efficient and reliable connectivity.

Wireless

Optimizing wireless networks for enterprises, ensuring strong signal coverage and high performance.

DevOps

Our comprehensive skill set ensures seamless integration and operation for all your network infrastructure.

Stay tuned for our

Latest Jobs

As freelancers, we seamlessly integrate into existing teams, bringing flexibility and adaptability to every project. Our professionalism and commitment to excellence ensure that we enhance the capabilities of your team, helping you achieve your goals with efficiency, reliability, and innovation.

Security Consultant

As a Senior Security Consultant, you will play a pivotal role in ensuring the security of our clients' information systems. You will lead security assessments, design and implement security solutions, and provide strategic advice to enhance the overall security posture. This role requires a deep understanding of cybersecurity principles, excellent analytical skills, and the ability to communicate effectively with technical and non-technical stakeholders.

Network Architect

The Network Architect will be responsible for delivering high-level network consulting services, including the design, implementation, and management of network solutions. This role requires in-depth technical expertise, strong problem-solving skills, and the ability to communicate complex technical concepts to clients.

DevOps Engineer

As a DevOps Engineer, you will be responsible for the design, implementation, and maintenance of the infrastructure and automation that powers our software development and deployment processes. You will collaborate with software developers, system operators, and other IT staff members to manage code releases and ensure smooth, automated transitions from development to production environments.

heading

Enterprise security without
vendor lock-in

How we work