Switzerland based global delivery

Cybersecurity services. Practical protection from assessment to assurance.

Explore four complementary security services, delivered by experienced practitioners with clear accountability and risk-based priorities.

Discuss your security priorities

Jaroslav Kacina

Managing Partner · Pfäffikon SZ

We focus on security measures that work in your business, not simply more technology.

Trusted by

  • medmix
  • Deutsche Bank
  • UBS

Explore our services

Four complementary cybersecurity services.

We help organisations assess their security posture, engineer effective controls, operate protection and independently test the results. Choose the service aligned to your immediate priority.

Cybersecurity service

Security Advisory & Assessments

Understand exposure, prioritise investment and establish a practical security roadmap.

Cybersecurity service

Security Engineering & Implementation

Implement effective protection across cloud, identities, endpoints and data.

Cybersecurity service

Managed Security & Operations

Operate and improve controls with clear responsibilities and agreed coverage.

Cybersecurity service

Security Testing & Assurance

Validate defences through authorised testing and actionable remediation.

Why Carlavia

Enterprise security expertise. Practical delivery.

Experienced practitioners combine risk advisory, security engineering, operational support and technical assurance. Our teams work with your people, define responsibilities clearly and focus on sustainable protection and cost discipline.

Business transformation & boardroom leadership

Driving change programmes, advising steering committees and guiding boards to measurable results.

Instrumental in implementations

Delivered as external consultants and as internal stakeholders — we know the challenges on both sides.

End-to-end delivery

From process and functional expertise to ABAP development, data quality and systems integration.

Internal IT & ERP leadership

Hands-on experience running IT departments, ERP teams and competence centres.

Security expertise with practical accountability.

Our expertise

Specialist capabilities supporting the full security lifecycle.

From Microsoft security and cloud protection to identity, risk management, penetration testing and remediation — explore our technical specialisms.

Specialist expertise

Defender, Sentinel, Entra and Purview implementation and tuning.

Specialist expertise

Microsoft Security

Defender, Sentinel, Entra and Purview implementation and tuning.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

Secure Azure, hybrid workloads, network boundaries and configurations.

Specialist expertise

Cloud & Infrastructure Security

Secure Azure, hybrid workloads, network boundaries and configurations.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

MFA, least privilege, privileged access and identity governance.

Specialist expertise

Identity & Access Management

MFA, least privilege, privileged access and identity governance.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

Classification, sensitivity labels, DLP and data access safeguards.

Specialist expertise

Data Protection & Information Security

Classification, sensitivity labels, DLP and data access safeguards.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

Detection engineering, SIEM/XDR, triage and incident readiness.

Specialist expertise

Threat Detection & Incident Response

Detection engineering, SIEM/XDR, triage and incident readiness.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

Web and API security testing, secure engineering and remediation.

Specialist expertise

Application & API Security

Web and API security testing, secure engineering and remediation.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

ISO 27001 and NIS2 readiness, risk governance and practical roadmaps.

Specialist expertise

Governance, Risk & Compliance

ISO 27001 and NIS2 readiness, risk governance and practical roadmaps.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

Specialist expertise

Penetration testing, red teaming, vulnerability validation and retesting.

Specialist expertise

Offensive Security & Assurance

Penetration testing, red teaming, vulnerability validation and retesting.

We agree objectives and technical scope, perform evidence-based assessment or implementation, prioritise risks and hand over clear recommendations, ownership and validation criteria.

Contact

What it’s like to work with us.

  • Shared accountability

    We work with your IT and security teams as one delivery team.

    • Named owners for agreed outcomes.
    • Transparent communication and risk escalation.
    • Complementary skills where you need them.
    • Knowledge transfer for lasting improvement.
    How we work
  • Scope. Deliver. Validate.

    Security improvements follow agreed priorities and documented evidence.

    • Discover assets, threats and constraints.
    • Prioritise business risk and action.
    • Implement or assess agreed controls.
    • Validate outcomes and handover.
    How we work
  • Experienced, practical specialists

    Clear commitments, technical substance and disciplined cost.

    • Senior practitioners engaged in delivery.
    • Honest advice on limitations and tradeoffs.
    • Transparent costs and scope.
    • Accountable handover to your team.
    About us

How it starts

From security priorities to an actionable plan in three steps.

  1. Discovery Meeting

    Tell us where you are. We’ll tell you what we’d do.

  2. Assessment

    We map your landscape, options and risks.

  3. Proposal

    Clear scope, timeline and a named team.

Initial discussion · No obligation

Why choose us

Partner with a reliable digitalization expert

01

12 countries worldwide

Our team has international experience that we use in technological transformation

02

Supports 2 continents

Our services are used by countries across time zones from Eastern EU to Canada

03

Leaders in implementation

Years of experience guarantee quality and process knowledge

View all services

FAQ

Before you book a call.

We begin with your business priorities, existing controls and most material exposures, then propose an appropriately scoped assessment or service.

Yes. Our specialists integrate with internal teams and define responsibility, reporting and handover.

Coverage and response times depend on the agreed service. We do not imply 24/7 monitoring without an explicit contractual arrangement.

No. We support readiness, control improvement and evidence. Certification and legal determinations remain with the relevant independent parties.

Grow with us.

SAP, engineering, cloud, design and business roles across six companies in Switzerland and Slovakia.

Bring us your enterprise technology challenge.

Tell us the business problem. We'll tell you which capability it needs, who would lead it — and what a sensible first step looks like.

  • Jaroslav Kacina

  • Marian Hires