Alice&Bob.Company is experienced in developing and deploying AWS WAF rule sets, tailored to your company needs. We help our customers to implement and configure the AWS Web Application Firewall (WAF) to block for example the OWASP Top10 security issues like SQL injection or Cross-Site-Scripting. We support in selecting pre-configured rule sets or create customized rules. We have experience with blocking bots, crawlers and other malicious actors. We help with monitoring and reviewing rules to make sure your application is secured and there is no overblocking of your customers. With the powerful toolbox of the AWS WAF and our experience we are able to deliver a secure and complete package in the shortest amount of time.

Our Digital Foundation Consulting anchors your business in the cloud era, providing a resilient and adaptable framework for digital transformation. We craft a foundational platform that integrates essential technology pillars, enabling you to build, deploy, and manage applications seamlessly in a secure, cost-effective environment.

The A&B Security Assessment will provide you broad insights into the cloud security concepts of AWS and the way your AWS services are configured. After an in-depth review of the architecture of the selected account(s), we will provide a list of findings grouped in the different categories presented in the Security Pilar of the AWS Best Practices Manual: Security, IAM, Detection, Infrastructure protection, Data Protection, Incident Response and Cost Optimisation (this last one only if applicable) To do so, Alice&Bob.Company GmbH will carry out the Security Assessment in three phases: Scoping account(s) and kick-off meeting Review of AWS architecture of the selected account(s) following AWS Best practices Group and categorisation of findings Presentation of results Alice&Bob.Company GmbH will present findings with both risk ratings and remediation efforts, enabling you to quickly take well informed decisions on prioritising security fixes. Alice&Bob.Company GmbH's diverse team of security specialists is available to support remediation on your products as needed, as well as to provide security trainings to your own cloud/security teams, based on the assessment’s findings.