Schedule a consultation, or start with a Cloud Security Health Check: get a risk and impact matrix for your environment within one week.
Cloud Security and Zero Trust
SUE secures cloud and Kubernetes environments using a Zero Trust approach and three pillars: code and pipelines, applications in production, and the underlying infrastructure. Using Wiz, Cloudflare, and your cloud provider’s security services, we identify risks, address the most critical ones first, and align your security measures with NIS2, DORA, and ISO 27001. Start with a Cloud Security Health Check.
First the basics, then new tools
Most cloud incidents start with overly broad permissions, a publicly accessible resource, or disabled logging. That’s why we address those fundamentals first, before adding new tools. An extra scanner that generates alerts that no one follows up on won’t make you any safer.
To find out who is responsible for what in the cloud, which risks are the greatest, and what NIS2, DORA, and the Cyber Resilience Act require, read our guide to cloud security.
When should you bring in SUE?
-
You are subject to the Dutch Cybersecurity Act (Cbw, implementing NIS2) or DORA and must demonstrate that you manage risks, patch vulnerabilities in a timely manner, and assess your suppliers.
-
You don't have a clear overview of misconfigurations, permissions, and vulnerabilities in your AWS, Azure, or Google Cloud environment.
-
Your security tools are generating more alerts than your team can handle.
-
Your development teams deploy quickly, and security comes last.
-
You're running Kubernetes and aren't sure whether your clusters, images, and network traffic are properly secured.
-
You develop software that falls under the Cyber Resilience Act. As of 11 September 2026, you must report actively exploited vulnerabilities within 24 hours.
What does SUE do in terms of cloud security?
Three pillars of Zero Trust: code and pipelines, applications in production, and the underlying infrastructure. With Wiz and Cloudflare, and ongoing management through Managed Cloud Security.
01
Data & software security
Security in the development pipeline: secret management, code, dependency, and image scans, and signed builds.
02
Application runtime security
Protection of workloads and containers in production, using network segmentation, runtime detection with Falco, and network policies with Cilium.
03
Infrastructure Security
Gain visibility into misconfigurations, identities, permissions, and attack vectors with Wiz, plus encryption, logging, and threat detection with Amazon GuardDuty and Microsoft Defender for Cloud.
04
Zero Trust access
Access based on identity and context rather than network location, with Cloudflare.
05
Compliance
Compliance with NIS2, DORA, ISO 27001, BIO, and PCI-DSS, linked to your cloud configuration.
06
Data sovereignty
Where your data is stored, under which jurisdiction, and who has access to it.
07
Ongoing management
Monitoring, follow-up on findings, and incident response.
How does SUE approach cloud security?
Start with a Cloud Security Health Check. Within one week, you’ll know which risks to address first.
01
Mapping
With a Cloud Security Health Check, we assess your environment against the three pillars within one week and map each risk onto an opportunity and impact matrix. → Cloud Security Health Check
02
Rapid improvements
We’ll start by addressing the issues that eliminate the most risk with the least effort, such as publicly accessible resources, overly broad permissions, and missing logging.
03
Security framework
We are implementing the following structural measures: Zero Trust access, policies in the pipeline, continuous monitoring using a CNAPP, and logging and detection.
04
Continuous monitoring
With Managed Cloud Security, SUE monitors your environment and follows up on findings. Or your own team can take over, with knowledge transfer from SUE. → Managed Cloud Security
Customer results
01
PCI DSS compliance made easier with Wiz. Centralized visibility into risks in the payment service provider’s AWS environment. Development and platform teams can identify risks in their own environments and resolve them on their own.
Read more
02
A complete risk profile in just a few hours. Wiz in the Azure environment, with automatic mapping to CIS Controls, NIS2, and ISO 27001.
Read more
03
AWS costs and security in a single approach. SUE continuously improves the security posture of the AWS environment while optimizing cloud costs.
Read more
Arne van Vuuren, Global IT Manager, Operations, Huisman
"The Wiz solution is essential to our operation and ensures that Huisman maintains its risk-based security approach."
Which partners and tools does SUE work with?
| Partner or tool | What is it for? |
|---|---|
| Wiz | CNAPP: misconfigurations, vulnerabilities, identities and attack paths in AWS, Azure and Google Cloud in AWS, Azure, and Google Cloud |
| Cloudflare | Zero Trust Access, SASE, WAF, and DDoS Protection |
| Aquasec | Container and Kubernetes Security, from Image to Runtime |
| Dynatrace | Observability and runtime insights |
| GitLab | Security scans in the pipeline |
| Open source: Trivy, Falco, Keycloak, Cilium | Image scanning, runtime detection, identity, and network policies |
| Native cloud services: Amazon GuardDuty and Microsoft Defender for Cloud | Threat Detection by Cloud |
In addition to certifications from our technology partners, SUE itself is ISO 27001-certified. This means we apply the same practices we recommend to our clients to our own operations, and an external auditor verifies this every year.
Steven Ulrich, IT Services Manager, Rijk Zwaan
"Thanks to SUE’s in-depth expertise and dedication, we were able to execute a complex transition smoothly and efficiently. The result is a secure and compliant platform that our organization can fully rely on."
About SUE
Modernize the code. Optimize the cloud. Run the platform.
SUE is a Dutch cloud native solutions partner that modernizes mission-critical applications, reduces cloud costs, and manages your platform. Specialists in Linux, Kubernetes, and the cloud.
29+
Years Experience
150+
Engineers and consultants
1.150+
Certifications
ISO
9001 & 27001
500+
Projects
75+
Research papersFrequently asked questions
All frequently asked questions
Cloud security is the set of measures, processes, and tools that protect data, applications, and infrastructure in the cloud: identities and access, configuration, networking, encryption, logging, and workload security. The provider secures the infrastructure; you secure what runs on it. With cloud native applications—using containers, Kubernetes, and serverless—this is largely done through code: policies as code, image scanning in the pipeline, and runtime detection in the cluster.
SUE uses Wiz for CNAPP, Cloudflare for Zero Trust access, Aquasec for containers and Kubernetes, and the cloud’s own security services, such as Amazon GuardDuty and Microsoft Defender for Cloud. We start with what’s already in place and only add what’s missing. We reduce the number of overlapping tools so your team receives fewer duplicate alerts.
The risks most likely to lead to an incident include: publicly accessible resources, overly broad permissions, and disabled logging. A new tool won’t automatically solve these issues. In a Cloud Security Health Check, SUE assesses your environment within one week and maps each risk onto a risk-and-impact matrix, so you know which issues to address first.
Discuss your cloud security with a specialist
Discuss your cloud security with a specialist
Schedule a consultation, or start with a Cloud Security Health Check: get a risk and impact matrix for your environment within one week.
* required