with you to understand your business and the potential security risk areas.
your current IT security controls in respect to current and future cyber threats.
with you on ways to minimise identified risks in a clear and simple language.
your IT security controls, minimise business risk and provide business assurance.
IT security can be a daunting subject – but it doesn’t need to be. Whether you want to find out what we think about a particular vendor or would like a full security review we will work with you to get the best solutions you can afford.
Security services and products are often sold based on fear and uncertainty – we strongly disagree with this approach. Security does not have to be expensive or scary, many problems can be avoided by simple procedure or process changes which actually don’t cost you anything. Often people are the greatest security risk, not technology. We can help you identify these weaknesses and strengthen your company’s security practice.
Assuming the role of an internal or external attacker we try to break the security controls you have in place.
Penetration testing provides the ultimate assurance that you are protected, as we use a wide range of methods to break through your current security controls. After testing we provide you with a report providing advice on which issues are most critical and suggested actions to remedy them. We can offer full support with any of these remediation actions and a discounted re-test as required.
A managed vulnerability service which regularly checks and reports on your internal and internet facing hosts.
For internet facing applications we operate a cloud based vulnerability scanning platform, to set up your hosts on this platform the external IP address range for your company is used.
For internal vulnerability scans we would deploy one of our vulnerability scanners within your network to scan appropriate hosts. This device would be fully managed by us with scans being run at an agreed time and regular reports produced on any vulnerabilities found.
Reports would detail all vulnerabilities found and would prioritise them according to the risk to your business with suggested actions for remediation.
A managed service that protects your web facing applications, our security gateways will filter all inbound web traffic so that only genuine traffic reaches your web servers.
For many companies web tier access (web servers, remote access platforms etc) present the highest security risk, because an attacker can reach these via the internet. 70% of today’s attacks at the web tier are aimed at vulnerabilities within Web Applications. Unfortunately a lot of web application developers are not familiar with defensive coding resulting in applications that are vulnerable to attack tools, many of which are available for free via the internet.
Our managed service is designed to protect your web facing applications. Our platform is cloud based for simplicity. You need to make a DNS update so that all your inbound web traffic is filtered by our security gateways so that only genuine traffic reaches your web services.
To complement this service we also offer a cloud based application vulnerability scanning service so we know about any vulnerabilities before an attacker does. This will enable us to block any attempts to exploit any detected vulnerabilities at our gateways while your developers can fix the root cause of the problem.
A tailored log management service which collects security logs from selected devices and provides you with a simple analysis, in order to react quickly to any threats.
How would you know if someone was trying to hack into your most critical infrastructure asset? In today's busy company networks there is a massive amount of information generated via infrastructure event logs. These logs are critical to detecting any malicious activity but unfortunately most enterprises today don't have the skills or resource to constantly check these logs on a regular basis.
Truststream offers a fully tailored log management service whereby we collect all of the security logs from selected devices via our onsite log collectors and send them securely back to our cloud based monitoring platform for further analysis by one of our security analysts.
Network Security Monitoring can help you to get the full picture by installing network based sensors into critical segments of your network.
Monitoring infrastructure security logs doesn’t provide the full picture as to what is taking place on your network. To enable full coverage you need to also analyse live network traffic for known malicious activity, think of this as Anti-Virus for your network traffic.
As part of the Managed Security Monitoring Service Truststream will provide Network Security monitoring by installing network based sensors into critical segments of your network. The logs from these sensors will then be sent back securely to our cloud based monitoring platform for investigation by our security analysts.
By combining the events we have seen from the log management service and the network security monitoring we are able to provide the full picture on any activity that is taking place within your estate at any point in time. To do this manually is near impossible in most of todays enterprise networks
Truststream are a Cyber Essentials Certification Body. We can assess your organisation against the Cyber Essentials Framework and certify that you meet the UK Government’s baseline standard.
The Cyber Essentials scheme lays out the fundamental technical security controls that an organisation should have in place to defend against Internet based threats. By certifying against this standard your organisation can demonstrate that it has taken steps to protect your and your clients’ data from cyber attacks.
We build long term trusting relationships with our clients that enable tailored security approaches to be implemented. Truststream Security Solutions was set up by Paul Sullivan and Bryan Thomson in 2011 and is based in Edinburgh, Scotland. Both Directors are passionate about security and the service they provide to their clients. As experts in security they saw the need for a business that approached security in a practical and pragmatic way but was tailored to clients needs. Bryan and Paul have years of experience across all security and technical disciplines and have worked in many organisations across a range of different sectors. Hear what our clients say about us.
"Truststream provide a first class service. I was genuinely impressed by their level of knowledge and expertise that was also tempered with pragmatism based on real world experience. I have no hesitation in recommending Truststream and consider them to be the best security consultancy out there."
"I cannot recommend truststream highly enough, the knowledge they bring to an organisation challenges the thought process and they explain complex issues in a non technical way to enable the importance of security to be discussed at all levels of an organisation"
We regularly send out updates and newsletters – if you would like to receive communications from us please provide your e mail.
