# Enderlin Consulting – Security consulting that goes all the way to implementation. > I assess your IT, design a security concept that fits, and implement it with you – vendor-neutral, with a focus on Zero Trust. IT security consulting · Zero Trust · Fribourg, Switzerland ## Four ways to work with me. ### 1. Assessment Where do you stand? I look at access, systems and dependencies and show where the biggest risks are. **Result:** Short report with prioritised measures ### 2. Architecture and target picture Where should you go? A target architecture that fits your size – and the steps to get there. **Result:** Architecture and roadmap ### 3. Implementation I implement it myself or support your team: configuration, integration, automation. **Result:** A working, documented solution ### 4. Review and second opinion Already have a concept or a vendor proposal? I review it independently. **Result:** A clear assessment with recommendations ## Vendor-neutral. I recommend the solution that fits your situation – from a major vendor, open source, or [CyberKMU](https://cyberkmu.ch/), my own ZTNA platform for SMEs. I say so openly, and I only recommend it where it genuinely fits. ## My focus is Zero Trust. - Zero Trust architecture and target picture - Secure access with ZTNA and SSE - Microsegmentation - Security for business applications, e.g. DMS **Also:** Platform engineering and CI/CD, IT and cloud architecture, Web and digitalisation ## References - [Gilgen & Petitpierre Partners Sàrl](https://gp-partners.ch/): Security infrastructure, Security consulting, Implementation - [einrichtungsberater.ch](https://www.einrichtungsberater.ch/): Security consulting - [Snowstick](https://snowstick.ch/): Security consulting, Infrastructure ## Today a moat. Tomorrow only justified paths. Zero Trust sounds technical. The idea is simple: a path to a system only exists once it is allowed. ### Today: Castle and moat Like a castle: once you’re over the drawbridge, you can go anywhere. This is how most company networks are built. The perimeter is protected, but inside everything is open: to every system and between systems. Once on the VPN, you can reach almost everything – and so can an attacker with a stolen password. ### Tomorrow: Every path needs permission Like a hotel: your key card opens your room – not every room. There are no open paths anymore. A path to an application only appears once it has been checked: who, on which device, for what purpose. And only to that one application. ### All the way: Chains only exist on request Like a courier with a delivery order: they only pick up what was ordered – and only if someone ordered it. Systems don’t simply talk to each other either. When Anna opens her invoice in the customer portal, a chain forms all the way to the database – on Anna’s behalf, for this request only. Without a user triggering it, the chain doesn’t exist. _Simplified illustration. How far this can be implemented depends on your systems – which is exactly what we clarify together._ ## Short answers. ### What is Zero Trust, in simple terms? Zero Trust means that no access is trusted automatically – not even inside the company network. Every access to an application is checked based on identity, device and purpose, and only allowed as far as necessary. Instead of an open network with a protected perimeter, there are targeted, justified paths to individual applications. ### What is the difference between ZTNA and a VPN? A VPN connects a device to the company network – after that, much is usually reachable. ZTNA (Zero Trust Network Access) connects a verified person only to the applications they actually need. All other systems remain invisible. ### Is Zero Trust worthwhile for SMEs? Yes. SMEs often have networks that have grown over time, external partners and remote staff. Zero Trust can start small: often it is enough to first control the most important access in a targeted way, such as remote access and access for external partners. ### Are you tied to a vendor? No. I advise vendor-neutrally and recommend what fits your situation – from established vendors to open source and CyberKMU, my own ZTNA platform for SMEs. I disclose this openly. ### How does a collaboration start? With a short, no-obligation conversation about your situation. I then propose a first step – usually an assessment or a review of an existing concept. ### Where and in which languages do you work? I work from Fribourg, Switzerland, for companies across Switzerland, in German and French. ## About I’m Adrian Enderlin, IT security engineer. I design security architectures – and implement them myself, down to the verified rule. Experience from large Swiss organisations and regulated banking environments. Open source: contributions to OpenZiti and my own project [Kernloom](https://kernloom.com/). ## Contact Which access do you want clearer control over? Briefly describe your situation. Together we’ll work out a sensible first step. - Email: [contact@enderlin.group](mailto:contact@enderlin.group) - Phone: +41 79 668 45 38 - Address: Bernstrasse 8, 1700 Fribourg, Switzerland --- Language versions: [Deutsch](https://enderlin.consulting/) · [Français](https://enderlin.consulting/fr/) · [English](https://enderlin.consulting/en/)