Company
Technology Ecosystem
The platforms and technologies Onion Infosec works with, grouped by domain. They are named to describe the kind of work we do. Naming a technology does not indicate a commercial partnership.
On this page
How to read this page
The technologies below are examples of what our teams build on, secure and operate. The lists are not exhaustive, and they change as client environments change.
Naming a technology on this page does not indicate a commercial partnership with its vendor, or any endorsement by that vendor. Product names belong to their owners.
Technologies by domain
Each domain links to the service line where the work is described in full.
Cloud platforms
Landing zones, migration, platform engineering, cost and security reviews. See Cloud.
- Amazon Web Services
- Microsoft Azure
- Google Cloud
- Microsoft 365 and Google Workspace
Security operations platforms
SIEM, EDR and XDR deployment, log onboarding, detection engineering and monitoring. See managed SOC and MDR.
- Microsoft Sentinel
- Splunk
- IBM QRadar
- Elastic Security
- Wazuh
- Microsoft Defender XDR
- CrowdStrike Falcon
- SentinelOne
Identity
Directory hardening, single sign-on, conditional access, privileged access and identity governance. See Identity Security.
- Microsoft Entra ID
- Active Directory
- Okta
- CyberArk
- SAML 2.0, OAuth 2.0 and OpenID Connect
DevOps and CI/CD
Pipeline design, security testing in the pipeline, secrets handling and release controls. See DevSecOps.
- GitHub and GitHub Actions
- GitLab CI/CD
- Azure DevOps
- Jenkins
- Argo CD
- SAST, DAST, dependency and secret scanning tools
Infrastructure as code and containers
Reviewed, versioned infrastructure and container platforms. See Cloud Engineering.
- Terraform
- Bicep and ARM templates
- AWS CloudFormation
- Ansible
- Docker
- Kubernetes
- Helm
AI platforms and frameworks
LLM applications, retrieval, agents, evaluation and AI security testing. See AI.
- Azure OpenAI Service
- Amazon Bedrock
- Google Vertex AI
- Open-weight models such as Llama and Mistral
- LangChain and LlamaIndex
- PyTorch
- Vector databases
OT and industrial protocols
Industrial network assessment, segmentation and passive monitoring. See OT.
- Modbus
- DNP3
- OPC UA
- PROFINET
- EtherNet/IP
- IEC 61850
- BACnet
Working with client-chosen tools
Most organizations have already chosen their platforms. We start from what is in place. An engagement normally uses the client’s existing cloud, SIEM, identity provider and pipelines, under the client’s licenses and inside the client’s tenant.
Where a tool is missing or is not doing its job, we say so and set out the options with their trade-offs, including open-source tools and features already included in platforms the client pays for. The choice stays with the client.
If we do not have working experience with a tool a client depends on, we say that at scoping, before work starts.
Our own products
Onion Infosec is developing its own security products. They are in development and none is commercially available. Our services do not depend on them.