How do we start working with SecTepe?

All engagements start with a free initial conversation. You then receive an offer with a clear scope of effort, timeline and outcomes. On request we start with a small pilot to build trust and experience our delivery before moving into full implementation.

What company sizes and sectors do you support?

We work with small and mid-sized businesses as well as with corporate divisions and operators of critical infrastructure (KRITIS). Our core sectors are manufacturing, trades, healthcare, financial services, energy providers, public sector and the DACH mid-market.

Do you work on site, remotely or hybrid?

Both. Assessments, consulting and most managed services run remotely from our German data centres. For on-site work (workshops, training, incident response) we are primarily active in North Rhine-Westphalia, the Rhineland and the Ruhr area and extend our radius as needed.

Which standards and regulations do you cover?

We work to ISO 27001:2022, BSI IT-Grundschutz, TISAX, B3S KRITIS, NIS2, DORA and sector-specific requirements. Our methodology is grounded in recognised frameworks such as NIST CSF, MITRE ATT&CK, OWASP and OSSTMM, combined tailored to each project.

How do you protect the confidentiality of my data?

Confidentiality is anchored contractually and technically. Before every engagement we sign a mutual non-disclosure agreement, data is processed exclusively in German data centres, access is governed by zero-trust policies with multi-factor authentication, and all employees are contractually and GDPR-compliant bound to confidentiality.

SecTepe.Comm

Security & SIEM

Security & SIEM – Zero Trust by Design

SecTepe.Comm brings security from the ground up: central SIEM, secrets management, web application firewall and mTLS between all services.

Request a demo

At a glance

Wazuh SIEM
OpenBao secrets
Coraza WAF
Linkerd mTLS
File integrity monitoring
Compliance reporting

Features at a glance

A complete security stack – from endpoint visibility and secrets management to application firewall and mutual TLS.

Wazuh SIEM

Agent-based monitoring for endpoints, servers and containers with real-time alerts.

OpenBao Secrets

Central secrets management with dynamic credentials and short-lived tokens.

Coraza WAF (OWASP CRS)

Modern Go-based WAF with OWASP ModSecurity Core Rule Set.

Linkerd Service Mesh

Automatic mTLS and identity between all services – zero trust out of the box.

FIM & Rootkit Detection

File integrity monitoring and rootkit detection on all managed hosts.

SIEM Dashboards

Prebuilt dashboards for PCI-DSS, HIPAA, NIST and GDPR compliance.

Technology & integration

Wazuh collects and correlates events, OpenBao manages secrets, Coraza protects HTTP endpoints and Linkerd ensures every east-west connection is mTLS-secured.

• Wazuh Manager + agents
• OpenBao (Vault fork)
• Coraza WAF + ModSecurity CRS
• Linkerd 2 service mesh
• OpenSearch backend
• Alert routing to Matrix/email

Your benefits

Unified visibility across the stack
Zero-trust mTLS for all services
Compliance-ready reports
Secrets never leave the vault

Ready for zero trust security?

Let's harden your SecTepe.Comm environment – from SIEM rollout to WAF tuning and mTLS enforcement.

Request a demo Back to SecTepe.Comm

How we work with you

We treat every engagement as a long-term partnership rather than a one-off delivery. Our approach is organised into four clear phases so that you always know what happens when, who owns which responsibility and which outcomes you can expect.

1. Free initial conversation

We learn about your starting position, your goals and the constraints you operate under. In 30 to 45 minutes we check whether our offering fits your situation, outline possible paths and answer your questions – no obligation attached.

2. Structured assessment

We capture the current state systematically – technically, organisationally and in regulatory terms. You receive a prioritised assessment that clearly names strengths, gaps and action areas and forms the basis for a robust offer.

3. Delivery with a dedicated lead

A senior lead guides you through the delivery with clear milestones, transparent effort and cost planning and a weekly status. All results are documented and remain fully owned by you.

4. Continuous operations & review

After project close, we stay alongside you in operations – via managed-service components, regular reviews, action tracking and proactive recommendations on new threats, regulatory changes or technology shifts.

Frequently asked questions about our services

The questions we are most often asked in first conversations – answered concisely. For anything else, our team is available at hello@sectepe.de or by phone at any time.

How do we start working with SecTepe?: All engagements start with a free initial conversation. You then receive an offer with a clear scope of effort, timeline and outcomes. On request we start with a small pilot to build trust and experience our delivery before moving into full implementation.
What company sizes and sectors do you support?: We work with small and mid-sized businesses as well as with corporate divisions and operators of critical infrastructure (KRITIS). Our core sectors are manufacturing, trades, healthcare, financial services, energy providers, public sector and the DACH mid-market.
Do you work on site, remotely or hybrid?: Both. Assessments, consulting and most managed services run remotely from our German data centres. For on-site work (workshops, training, incident response) we are primarily active in North Rhine-Westphalia, the Rhineland and the Ruhr area and extend our radius as needed.
Which standards and regulations do you cover?: We work to ISO 27001:2022, BSI IT-Grundschutz, TISAX, B3S KRITIS, NIS2, DORA and sector-specific requirements. Our methodology is grounded in recognised frameworks such as NIST CSF, MITRE ATT&CK, OWASP and OSSTMM, combined tailored to each project.
How do you protect the confidentiality of my data?: Confidentiality is anchored contractually and technically. Before every engagement we sign a mutual non-disclosure agreement, data is processed exclusively in German data centres, access is governed by zero-trust policies with multi-factor authentication, and all employees are contractually and GDPR-compliant bound to confidentiality.

Book a conversation