IT security consulting and managed security services for SMEs from the Chiemgau region
Saphira Security GmbH & Co. KG
Kirchanschöring (Chiemgau)New on Amplifa
About Saphira Security
Saphira Security is an IT security consulting company based in Kirchanschöring in the Chiemgau region. The company offers external information security officers (ISB/vCISO), IT security consulting, risk and vulnerability analyses, and automated penetration tests. Its analysis products include the IT infrastructure scan STRIX (Light or Full) for end devices, servers, cloud environments such as M365 and Azure, and Active Directory; the agentless Azure infrastructure scan OTUS including Entra ID; and the automated penetration test ASIO. Under the managed security service OWL (Orientation, Pathfinding & Lifecycle), Saphira Security supports its customers on a long-term basis in advancing their cybersecurity strategy, including training, policy creation, system configuration, and the definition of performance indicators. The consulting follows the OWL principle as a continuous cycle of assessment, planning, implementation, and ongoing optimization. Target groups are medium-sized companies, including those with critical infrastructure, particularly with regard to regulatory requirements such as NIS-2, ISO 27001, and GDPR.
- Site
- Kirchanschöring
- Processes
- IT security consulting / External ISB (vCISO), Vulnerability analysis (vulnerability scan), Risk analysis, IT infrastructure scan (STRIX), Azure infrastructure scan (OTUS), Automated penetration test (ASIO), Managed security service (OWL), Training and awareness trainings
- Materials
- IT Infrastructure Scan, Azure Infrastructure Scan, Automated Penetration Test, Managed Security Service
- Certificates
- ISO 27001 (consulting alignment)
- Industries
- Medium-sized companies, Critical infrastructure, Cross-industry, cross-industry
- 01
Assessment & Strategy
- 02
Risk Analysis & Planning
- 03
Implementation (Policies, Configuration, Training)
- 04
Continuous Consulting & Optimization
Services & Methods
IT Infrastructure Scan
Scan of the entire IT infrastructure including end devices, servers, cloud environments (M365, Azure), and Active Directory for security vulnerabilities.
Azure Infrastructure Scan
Agentless, automated review of the Azure infrastructure and Entra ID with prioritized recommendations for action and an attack path diagram.
Automated Penetration Test
Automated penetration tests and controlled attack simulations from an attacker's perspective to determine the attack surface.
Managed Security Service
Orientation, Pathfinding & Lifecycle: long-term support in advancing the cybersecurity strategy, including training and optimization.
Location
Kirchanschöring
DEHeadquarters/Office
Analyses & Services
Inside the production
Industries
Processes & technical limits
| Processes | Tolerance | Max. part | Weight | Lot size | Materials |
|---|---|---|---|---|---|
| IT security consulting / External ISB (vCISO)Engineering | – | – | – | – | – |
| Vulnerability analysis (vulnerability scan)Testing | – | – | – | – | – |
| Risk analysisTesting | – | – | – | – | – |
| IT infrastructure scan (STRIX)Testing | – | – | – | – | – |
| Azure infrastructure scan (OTUS)Testing | – | – | – | – | – |
| Automated penetration test (ASIO)Testing | – | – | – | – | – |
| Managed security service (OWL)Engineering | – | – | – | – | – |
| Training and awareness trainingsEngineering | – | – | – | – | – |
| Creation/rework of security policies and documentationEngineering | – | – | – | – | – |
Additional services
Compliance & Security
The services are aligned with recognized standards such as ISO 27001 as well as regulatory requirements such as NIS-2 and GDPR. Emergency and backup recovery plans are defined and tested.
| Evidence | Kirchanschöring |
|---|---|
| ISO 27001 (consulting alignment) |