# EliTechZ

> EliTechZ delivers cloud infrastructure, AI integration and offensive security. Get a clear scope, tested delivery and documentation your team can use.

**Company**
- About: EliTechZ is an engineering and security company in Hilversum, the Netherlands.
- Business type in structured data: LocalBusiness
- Established: 1 June 2024 (2024-06-01)
- Dutch Chamber of Commerce (KVK): 93985290
- Location: Lijsterweg 65, 1221 JH Hilversum, Netherlands
- Service area: the Netherlands, the European Union and worldwide.
- Project languages: English and Dutch
- Scope, price and timing are agreed in writing before work starts. Security testing requires explicit permission and agreed limits.
- Trusted by: freudiger IT security, which works closely with EliTechZ on red teaming.

**Which service fits**
- Infrastructure work fits when a platform is unreliable, needs to move or keeps causing trouble.
- Penetration testing or red teaming fits when you need to know how an attacker could reach something important.
- AI integration fits when you want AI tools in your workflows with clear permissions and a person checking the result.

**Platforms and specialist capabilities**
- Cloud and virtualization: AWS, Azure, GCP, Oracle, OpenStack, Nutanix, VMware vSphere/ESXi and Proxmox.
- Containers and automation: Kubernetes, AKS, EKS, GKE, Red Hat OpenShift, Nutanix Kubernetes Platform, Harbor, Terraform, Ansible, Helm, PowerShell, Bash, GitHub workflows and Azure DevOps.
- AI platforms and integration: Ollama, OpenAI, Anthropic Claude and Google Gemini; model integration, agreed data access and human review.
- Networks and firewalls: Juniper, Check Point, Cisco, Fortinet, Palo Alto Networks, UniFi, OPNsense, pfSense, OpenWrt, SD-WAN, NGINX and Traefik.
- Email security and authentication: Barracuda, FortiMail, Proofpoint, Red Sift and Valimail; SPF, DKIM and DMARC.
- Email platforms and clients: Microsoft 365 (Office 365), Google Workspace, Zoho Mail, Proton Mail, Spark Mail, Microsoft Exchange and self-hosted mail.
- Endpoint security and management: Microsoft Defender for Endpoint, CrowdStrike, Trend Micro, FortiClient EMS, Carbon Black, Microsoft Intune, ManageEngine Endpoint Central and NinjaOne.
- Zero-trust network access (ZTNA): Zscaler, Twingate, Tailscale, Akamai Enterprise Application Access (EAA), Cloudflare and Fortinet.
- Virtual desktops and remote applications: NVIDIA GRID/vGPU, Microsoft Remote Desktop Services (RDS) and Terminal Server, Azure Virtual Desktop, Omnissa Horizon (VMware Horizon) and Citrix.
- Storage: Pure Storage, Qumulo, Dell ECS, Isilon, NetApp, Synology, QNAP, Avid NEXIS and Avid ISIS.
- CCTV and building systems: Hikvision CCTV, with supporting network, storage and access-control infrastructure.
- Media workflows: Adobe, Avid and Final Cut Pro; workstation, storage and broadcast workflow integration.
- Operating systems and enterprise platforms: Windows, Windows Server, macOS, Debian, Ubuntu, Red Hat, Unix and AIX, plus mainframe support.
- Backup and recovery: Veeam, Cohesity, recovery planning and restore validation.
- Monitoring and incident response: Grafana, Prometheus, Loki, Elastic Stack (ELK), Splunk, Nagios, ManageEngine OpManager, Microsoft Sentinel, Exabeam, Rapid7 and KQL.
- Identity and secrets: Active Directory, IAM, Conditional Access, gMSA and HashiCorp Vault.
- Application and database troubleshooting: Microsoft SQL Server, MySQL and MongoDB; tracing faults across applications, databases and infrastructure.

**Evidence notes**
- Training includes Architecting on AWS, Migrating to AWS and Syberwise industrial control system (ICS/SCADA) security learning at beginner and intermediate quiz levels.
- The qualifications and research acknowledgements listed here were earned by the engineer who delivers EliTechZ services.
- Client cases describe specific engagements with confidential client details. Outcomes are specific to those environments, not general performance guarantees.

**Selected results**
- Azure network performance: production speed rose a further 22% after NIC driver updates and MTU tuning.
- Active Directory hardening: NTLMv1 is off, service accounts became gMSAs and reliance on shared passwords dropped.
- Zero-trust microsegmentation: each microservice now reaches only the data it needs, and broadcast traffic fell.
- Lost-device resilience assessment: on a laptop left behind, file controls held but monitoring and permissions needed fixes.
- Azure third-party access assessment: the client's own controls were strong, but its IT partner's way in needed tightening.
- AI application for recruitment: untrusted CV content changed the LLM summaries in ways the hiring team did not expect.
- Recognition: the engineer has received three Rijksoverheid acknowledgements for responsible vulnerability disclosures, with NASA appreciation letters in 2024 and a NOS certificate of recognition issued on 22 October 2026. The public Bugcrowd Hall of Fame also records valid submissions for T-Mobile, NASA and the State of California. The American Battle Monuments Commission (ABMC) Hall of Fame also acknowledges the engineer's responsible disclosure work.

**Policy notes**
- Responsible disclosure reports receive an initial evaluation and expected resolution timeline within 3 business days under the published policy.
- The website uses no analytics or advertising tracking. Cloudflare processes essential request data and may set a short-lived security cookie for protection or a challenge. Dismissing the notice can set a first-party consent preference cookie.

## Services
- [Cloud infrastructure](https://elitechz.com/#infra): cloud, hybrid and on-premises platforms, migrations, identity, networking, automation, monitoring, recovery and operating documentation.
- [AI integration](https://elitechz.com/#infra): connect AI tools to business workflows with clear permissions, boundaries and a person checking the result.
- [Offensive security](https://elitechz.com/#redteam): penetration testing and red teaming across agreed systems, including web, API, cloud, identity and AI applications. Findings include an executive summary, technical evidence and remediation priorities; retesting is agreed within the scope.
- [Detailed service scope](https://elitechz.com/#platform-capabilities)

## Company
- [Website](https://elitechz.com/)
- [General contact](https://elitechz.com/#contact)
- [Project enquiry](https://elitechz.com/#contact)
- [Brand resources](https://elitechz.com/brand): logos, colours, usage guidelines and the downloadable brand kit.
- [Film: The EliTechZ story](https://elitechz.com/films/the-elitechz-story): 39-second company film about dependable platforms, practical automation and security.
- [Film: From complexity to control](https://elitechz.com/films/from-complexity-to-control): 44-second film on infrastructure engineering for cloud, hybrid and on-premises platforms.
- [Film: A different perspective on risk](https://elitechz.com/films/a-different-perspective-on-risk): 23-second film on offensive security: authorized penetration testing and red teaming.

## Delivery and evidence
- [Infrastructure delivery](https://elitechz.com/#infrastructure-delivery)
- [Security assessment scope and validation](https://elitechz.com/#security-assessment)
- [Engineering experience and individual qualifications](https://elitechz.com/#engineering-background)
- [Infrastructure cases](https://elitechz.com/#infra)
- [Security cases and public disclosure acknowledgements](https://elitechz.com/#redteam)
- [Public security research profile](https://bugcrowd.com/h/Paulus1337): Bugcrowd profile of the engineer delivering EliTechZ services.
- [Gradle Actions advisory GHSA-chpw-2mqm-95cc](https://github.com/gradle/actions/security/advisories/GHSA-chpw-2mqm-95cc): published on 28 October 2026, High severity (CVSS 8.1), fixed in version 6.4.1. Credits the engineer behind EliTechZ as reporter. The issue affects dependency-graph download-and-submit workflows and could expose or misuse the submitting job's GitHub token.
- [T-Mobile Hall of Fame](https://bugcrowd.com/engagements/t-mobile/hall_of_fames): acknowledgement for reporting security flaws.
- [NASA Hall of Fame](https://bugcrowd.com/engagements/nasa-vdp/hall_of_fames): acknowledgement for reporting security flaws.
- [ABMC Hall of Fame](https://gov.bugcrowd.net/engagements/abmc-vdp/hall_of_fames): acknowledgement from the American Battle Monuments Commission for reporting security flaws.
- [State of California Hall of Fame](https://bugcrowd.com/engagements/cdt-vdp-pro/hall_of_fames): acknowledgement for reporting security flaws.
- [Máxima MC Hall of Fame](https://www.mmc.nl/disclaimer/responsible-disclosure/responsible-disclosure-hall-of-fame/): acknowledges the engineer's responsible disclosure work in 2026.
- [Project questions](https://elitechz.com/#project-questions)
- [freudiger IT security](https://freudiger-it-security.com/): EliTechZ works closely with freudiger IT security on red teaming.

## Contact and policies
- [Contact](https://elitechz.com/#contact)
- [Privacy](https://elitechz.com/#privacy)
- [Cookies](https://elitechz.com/#cookies)
- [Terms](https://elitechz.com/#terms)
- [Responsible disclosure policy](https://elitechz.com/#cvd)
- [Security contact](https://elitechz.com/#cvd)
- [Machine-readable security contact and encryption details](https://elitechz.com/.well-known/security.txt)
- [Public PGP key](https://elitechz.com/pgp.txt)

## Company profiles
- [LinkedIn](https://www.linkedin.com/company/EliTechZ)
- [GitHub](https://github.com/EliTechZ)
- [Reddit](https://www.reddit.com/r/EliTechZ/)
- [YouTube](https://www.youtube.com/@EliTechZ)
- [Mastodon](https://infosec.exchange/@EliTechZ)
- [X](https://x.com/realEliTechZ)
- [Instagram](https://www.instagram.com/EliTechZ)
- [Facebook](https://www.facebook.com/EliTechZ)

## Optional
- [HTML sitemap](https://elitechz.com/sitemap)
- [XML sitemap](https://elitechz.com/sitemap.xml)
- [Web app manifest](https://elitechz.com/site.webmanifest)