01 / 04EliTechZ
Infrastructure + offensive security
Infrastructure that performs.
Security that holds.
EliTechZ is an engineering and security company in Hilversum, the Netherlands. When a platform is unreliable or a security question keeps coming back, you need someone who can get into the detail and own the work. As architect and consultant, EliTechZ designs and builds the fix, tests it and shows your team how to run it.
Be in control. Keep the platform running without losing sight of cost or risk.
Explore the security perspectiveA cloud migration or security redesign is hard to undo. We work through the trade-offs with your team before changing the platform, then test the result.
Your team should understand what changed and how to look after it. Our experience includes European e-commerce logistics, media, broadcast and streaming platforms.
Trusted by
Elite IT A-Z means staying with the work until your team can run the result. That might mean untangling a cloud platform or sorting out the basics, such as business WiFi, remote access or storage. We can discuss EU hosting and relevant GDPR or NIS2 requirements when they affect the design.
02 / 04Infrastructure
Cloud · platform · identity
Resilient platforms.
Secure identity. Calm operations.
A platform can look sound on paper and still be painful to operate. We work across cloud, hybrid and on-premises systems, connecting identity, automation and monitoring to the way your team actually runs them. AI integration is considered where it solves a useful problem.
Across your estate. AWS, Azure, GCP, Kubernetes, VMware, Nutanix, Proxmox and Oracle.
Start with your environmentStart with the issue that is costing your team time. If it points to a wider problem, we can look at the architecture together.
Examples of platform improvements delivered by EliTechZ. Client details are omitted; results depend on the environment.
Older authentication: Older authentication was still in use, and service accounts carried more access than they needed.
Identity hardening: We moved services off NTLMv1, then disabled NTLMv1 authentication. Service accounts were converted to group Managed Service Accounts (gMSAs). Where a writable domain controller was not needed, we used a read-only one, and we raised the functional level to Windows Server 2025. We also separated storage and client settings in Group Policy and replaced startup scripts with policy-based configuration.
Reduced password reliance: Less reliance on legacy authentication and shared passwords. The new Group Policy structure is easier for the team to understand and maintain.
Excess network access: Services could reach parts of the network they had no reason to talk to. That made a single breach harder to contain.
Service boundaries: We put zero-trust controls at the front end and limited each microservice to the data services it actually needed. Terraform and Kubernetes made the boundaries repeatable. Monitoring and security reporting still had to work after the change.
Fewer unnecessary paths: Services had fewer unnecessary network paths. Broadcast traffic fell, and the team kept the visibility it needed to operate the platform.
Slow production networks: Network performance on the Azure virtual machines was holding production back.
Driver and MTU changes: We updated the NIC drivers across the estate to supported versions and tuned MTU settings, including jumbo frames where appropriate.
Performance improvement: Production speed improved by a further 22% in that environment.
A camera is no use if its recording network or storage fails. We look at the infrastructure behind CCTV and door access, including what happens when power or connectivity is lost.
We keep building systems apart from ordinary office traffic and agree who can access recordings or maintain devices. Retention and recovery are discussed with the building owner and relevant specialists.
We support the systems your team already uses. The scope may be a migration, a reliability problem, a security change or day-to-day administration.
These are platforms and tools we work with. We agree the environment, access and deliverables before starting, including any mainframe or specialist media work.
EliTechZ delivers infrastructure, automation and offensive security work, from the first design decisions through implementation and handover. The engineer delivering these services has experience in European e-commerce logistics, media, broadcast and streaming platforms.
Earlier engineering roles included company and tenant migrations, storage and recovery projects, broadcast and streaming operations, and troubleshooting across applications, databases and infrastructure. That experience informs the work delivered through EliTechZ today.
Engineering portfolio on GitHub. Public responsible disclosure acknowledgements are listed in the Red Team section.
Qualifications earned by the engineer delivering EliTechZ services include ISC2 Certified in Cybersecurity, Microsoft Certified: Azure Fundamentals (AZ-900), ITIL Foundation, and Nutanix Associate and Professional certifications covering multicloud infrastructure, cloud integration, business continuity, and network security.
Achievements include PRINCE2 Foundation in 2019 and Microsoft Windows 7 specialist certifications in desktop support and configuration in 2015.
Completed Architecting on AWS and Migrating to AWS courses, plus Syberwise industrial control system (ICS/SCADA) security learning through beginner and intermediate quiz levels.
The latest items from the Kubernetes, GitHub Docs and Proxmox release feeds, refreshed daily. Each entry keeps its original publication date and links to the source, with the feed’s licence noted beneath it.
03 / 04Red Team
Offensive security · vulnerability testing
Offensive security that gives
your team a clear next step.
Penetration testing should tell you what someone could actually reach, not just produce a list of warnings. We test the agreed systems, explain what we could demonstrate and help your team decide what to fix first.
Evidence that leads to action. See what was found, why it matters and whether the fix holds.
Define the scope togetherWe follow realistic attack paths within the agreed scope. The report should make sense to the engineer fixing the issue and the person deciding what to tackle first.
Partnered with
Examples of authorized assessments and the decisions they supported. Client identities and sensitive technical details are kept private.
A laptop left behind: The question was simple: what would be exposed if a managed laptop was left behind?
Access and monitoring tests: We tested the device and followed the access available from it, checking whether monitoring would alert the team and whether cloud files stayed protected.
Data and monitoring findings: On-demand file controls limited access to user data. Monitoring and application permissions needed attention, so the team received a clear order for the fixes.
Outside support access: The organization had put strong controls around its own Azure accounts. It wanted to know whether outside support access was held to the same standard.
Partner access review: We reviewed the agreed Azure environment, including how its IT partner could reach supported services.
Controls needing attention: The internal controls held up well. A third-party support route needed tighter access controls.
AI-generated CV summaries: A recruitment team used an LLM to turn CVs into short summaries.
Untrusted content test: We checked what happened when the application passed untrusted CV content to the model.
Unexpected summaries: The content changed the summaries in ways the team did not expect. We recommended clearer input boundaries and a person checking the result.
For a building review, the agreed scope can cover entry, CCTV, connected devices and response responsibilities.
Published findings and acknowledgements from the organisations involved.
The engineer behind EliTechZ reports security flaws directly to the teams that can fix them. These acknowledgements and published findings come from that work.
Hall of fame
Security acknowledgements
Published security advisory
Appreciation letters
T-Mobile
State of California
ABMC
Belastingdienst
Responsible disclosure
Hall of fame
Hall of fame
Hall of fame
Wall of fame
Hall of fame
Hall of fame
Hall of fameSwipe or scroll sideways. Turn off Play logos to browse at your own pace.
Published advisory ·
A flaw in dependency-graph download-and-submit workflows could let an attacker submitting a fork pull request expose or misuse the submitting workflow's GitHub token. Gradle fixed the issue in version 6.4.1.
High severity · CVSS 8.1 · Fixed in 6.4.1
Read Gradle advisory GHSA-chpw-2mqm-95ccBugcrowd research profile · TryHackMe training profile.
Hands-on practice includes security labs and CTFs. The public profiles provide a view of ongoing activity.
The latest advisories from the NVD, CERT-EU and NCSC feeds, refreshed daily. Each entry keeps its original publication date and links to the source, with the feed’s licence noted beneath it.
04 / 04Contact
Based in Hilversum · Netherlands + worldwide support
Tell us what is getting in the way.
You do not need a finished project plan. Tell us what is not working, what you have tried and what a good outcome would look like.
The simplest way to begin
A short email is enough. Tell us what is happening, which systems are involved and when you need help. Please leave passwords and sensitive data out of the first message.
Infrastructure. Security. Delivery. A connected view of the work ahead.
Revisit the EliTechZ storyYou can start with a problem, not a project plan.
A clear start, regular updates and a handover your team can use.
Need help? .
EliTechZ is an engineering and security company in Hilversum, the Netherlands. We build, fix and automate cloud and on-premises infrastructure, connect AI tools to business workflows and test security through penetration testing and red teaming.
Infrastructure work fits when a platform is unreliable, needs to move or keeps causing trouble. Penetration testing or red teaming fits when you need to know how an attacker could reach something important. AI integration fits when you want AI tools in your workflows with clear permissions and a person checking the result.
Tell us what is happening, which systems are affected and when you need help. Please do not send passwords or sensitive data in your first email.
There is no contact form, analytics or advertising tracking. Email us when you choose to. Cloudflare processes essential request data to deliver and protect the site.
We put the work, price and timing in writing before we start. A security assessment also needs your explicit permission and clear limits.
We agree how to handle sensitive information before the work starts. If you need to send an encrypted security report, use the published PGP key and email our security contact.
It depends on what you need. We might build a new platform, fix an existing one or automate a task that keeps causing trouble. We test the result and make sure your team knows how to run it.
You get an executive summary, reproducible technical findings and a prioritized remediation plan. The report explains what the evidence demonstrates and any limits of the assessment.
Yes, if it is part of the agreed work. We test the affected area again to see whether the original issue is resolved.
Yes. We agree who does what with your team and your provider before work begins.
Yes. We are based in Hilversum and work with teams in the Netherlands and elsewhere. We can discuss the project in English or Dutch.
No marketing tracking: This site does not use analytics, advertising pixels, or marketing cookies, and we do not set cookies for normal visits. The site is delivered and protected by Cloudflare (CDN / security), which processes basic request metadata (for example, IP address, user-agent, request path, and timestamps) to provide the service. Very rarely, Cloudflare may present a security challenge; if that happens, Cloudflare may set a short-lived, strictly necessary cookie to remember the challenge result and keep the site secure.
Hosting: The site is served via Cloudflare Pages. Cloudflare may process basic request metadata (for example, IP address, user-agent, and security-related logs) to deliver and protect the service. See Cloudflare’s Privacy Policy.
Films: Our films are hosted on YouTube and embedded in privacy-enhanced mode (youtube-nocookie.com), which uses YouTube API Services. Nothing is loaded from YouTube until you open a film. YouTube, a Google service, then receives basic request data such as your IP address and browser details, and may set cookies or use similar storage on its own domain. See the Google Privacy Policy.
Contact: If you have privacy questions, .
Cookies: We do not use cookies (or localStorage/sessionStorage) for analytics, advertising, or personalization, and we do not run third-party trackers. Cloudflare is configured to avoid cookies for normal visits, but in rare cases where Cloudflare serves a security challenge, it may set a short-lived, strictly necessary cookie (for example, a clearance cookie) so you can continue browsing without repeated challenges. Our films are embedded from YouTube in privacy-enhanced mode and load only when you open one; YouTube may then set its own cookies, as described in the Privacy Policy.
Consent notice: because no non-essential cookies or trackers are used, the on-page notice only stores your preference not to show the informational cookie/security notice again on later visits. That preference is stored in a small first-party __Host-cookie_consent cookie and is not used for analytics, advertising, or personalization.
If this changes in the future, we will request consent before setting any non-essential cookies or enabling any tracking technologies.
This website is provided “as is” for informational purposes. Content may change without notice.
No warranties: EliTechZ makes no warranties of any kind, express or implied, regarding accuracy, completeness, or fitness for a particular purpose.
Limitation of liability: To the fullest extent permitted by law, EliTechZ is not liable for any direct or indirect damages arising from use of this site.
External links: Links to third-party sites are provided for convenience; EliTechZ does not control or endorse their content.
Film playback: The films on this site play through YouTube. By playing a film you agree to the YouTube Terms of Service.
Requests & work: Any services are subject to a separate written agreement that defines scope, fees, timelines, and responsibilities.
Even with strong controls, vulnerabilities can exist. If you discover an issue, please report it so we can address it quickly.
How to report
Please do
Please don’t
What we promise
Hall of Fame 🏆
Researchers who help improve security may be acknowledged here (with permission).
Brand resources
Close Brand resources and return to homeLogos, colours and usage guidelines for showing EliTechZ on partner, client, event and press pages.
freudiger IT security
