IT security consulting · Zero Trust · Fribourg, Switzerland
Security consulting that goes all the way to implementation.
I assess your IT, design a security concept that fits, and implement it with you – vendor-neutral, with a focus on Zero Trust.
IT security consulting · Zero Trust · Fribourg, Switzerland
I assess your IT, design a security concept that fits, and implement it with you – vendor-neutral, with a focus on Zero Trust.
How I work
Where do you stand? I look at access, systems and dependencies and show where the biggest risks are.
Short report with prioritised measures
Where should you go? A target architecture that fits your size – and the steps to get there.
Architecture and roadmap
I implement it myself or support your team: configuration, integration, automation.
A working, documented solution
Already have a concept or a vendor proposal? I review it independently.
A clear assessment with recommendations
I recommend the solution that fits your situation – from a major vendor, open source, or CyberKMU, my own ZTNA platform for SMEs. I say so openly, and I only recommend it where it genuinely fits.
My approach: Zero Trust
Zero Trust sounds technical. The idea is simple: a path to a system only exists once it is allowed.
Today
This is how most company networks are built. The perimeter is protected, but inside everything is open: to every system and between systems. Once on the VPN, you can reach almost everything – and so can an attacker with a stolen password.
Inside, everything is open – even between systems.
Tomorrow
There are no open paths anymore. A path to an application only appears once it has been checked: who, on which device, for what purpose. And only to that one application.
Anna is verified: only the path to accounting appears. There is no path to any other system.
All the way
Systems don’t simply talk to each other either. When Anna opens her invoice in the customer portal, a chain forms all the way to the database – on Anna’s behalf, for this request only. Without a user triggering it, the chain doesn’t exist.
The chain forms for this one request, on Anna’s behalf – and is gone afterwards.
Simplified illustration. How far this can be implemented depends on your systems – which is exactly what we clarify together.
FAQ
Zero Trust means that no access is trusted automatically – not even inside the company network. Every access to an application is checked based on identity, device and purpose, and only allowed as far as necessary. Instead of an open network with a protected perimeter, there are targeted, justified paths to individual applications.
A VPN connects a device to the company network – after that, much is usually reachable. ZTNA (Zero Trust Network Access) connects a verified person only to the applications they actually need. All other systems remain invisible.
Yes. SMEs often have networks that have grown over time, external partners and remote staff. Zero Trust can start small: often it is enough to first control the most important access in a targeted way, such as remote access and access for external partners.
No. I advise vendor-neutrally and recommend what fits your situation – from established vendors to open source and CyberKMU, my own ZTNA platform for SMEs. I disclose this openly.
With a short, no-obligation conversation about your situation. I then propose a first step – usually an assessment or a review of an existing concept.
I work from Fribourg, Switzerland, for companies across Switzerland, in German and French.
About
I’m Adrian Enderlin, IT security engineer. I design security architectures – and implement them myself, down to the verified rule.
Experience from large Swiss organisations and regulated banking environments. Open source: contributions to OpenZiti and my own project Kernloom.
Security can be simple – and so can your IT.
Contact
Briefly describe your situation. Together we’ll work out a sensible first step.
