YOTRON

Free Kubernetes-CIS-Scanner

scan your kubernetes cluster for cyber security

Warning: In Kubernetes, a node can be accessed via a ClusterRole.

An important task for Kubernetes is to provide a environment to run applications securely and to prevent a manipulation of Kubernetes and the applications by unauthorized user. Potential security gaps in Kubernetes are:

By default, all applications can communicate with each other.
No https-secured communication within Kubernetes.
Easily set up privileged access to servers for yourself.
Applications will only run reliably if configured correctly.

We are now offering a cost-free security check for Kubernetes based on the recommendations of the german cybersecurity agency.

You need more information.

You need more information? Call through or ask for an appointment.

Recent Projects

OpenSource-Project Grafana-Content-Manager

YOTRON has launched Grafana-Content-Manager, an open source project for managing the content of Grafana projects.

BigData with Kubernetes, Superset and S3

Kubernetes is ideal for BigData and BI. S3 is ideal to store their data.

We develop a BigData Platform in Kubernetes with Apache Superset, Trino, HIVE and Apache Druid which uses S3 as the data storage.

Cloud-based solution MAXQDA TeamCloud

We consulted VERBI GmbH on their way into the cloud to develop their cloud-based MAXQDA TeamCloud solution.

Project members in MAXQDA can now share files smoothly and securly via AWS.

Our development services

We modernise your IT

Operate and Migrate to Kubernetes

Cloud-Architecture

Automation with DevOps

Excellent Support

Downtime-Free Application Updates

Establishing 24/7 Services

High-Secured Applications

Monitoring and Alerting

Speed up Development

Our principles

Use the IT of Modern Art to provide optimal solutions for our customers

Modern

We are using state-of-the-art technology with the state-of-the-art functionality to offer state-of-the-art solutions.

Optimal

We are not using modern technology to offer the most fancy solution, we are using modern technology to offer a solution which runs with a minimum of operational resources.

Independent

We are completely independent from any software company. We do not sell licenses. Most of our supported tools are open-source products of industry quality.

Our focus

We are providing Hands-on consultancy with the following focuses

Operation

Even a modern infrastructure needs someone who is operating the infrastructure. We are supporting the customer to setup an infrastructure which only requires a minimum of resource for operating.

Monitoring

Get the full control over your complete infrastructure with a proper monitoring of your devices and applications and an alerting if something unusual is happening.

Automation

A modern infrastructure can be deployed at the touch of a button. All build processes, an update or an upgrade of an application or an infrastructure does not require anything else.

Reliability

Modern infrastructure is high available. Even a failure of one or two applications should not result in a failure for the user.

DevSecOps

We support our customers to build up a secured environment with our knowledge in generating of certificates and organizing a token authentication with identity providers or identity and access management tools with or without the cloud.

FinOps

We support our customers to set up their cloud environment under the principles of FinOps and to make the cloud costs transparent to the teams and other stakeholder and to consult the customer and teams to optimize costs.

Cloud-Architecture

We set up the architecture for your use case in the cloud like AWS or Azure. We can set up the cloud from the scratch, beginning with the authentication management of your company.

Fully managed

If possible, we are supporting fully managed solutions in the cloud to reduce the effort for operating the solutions.

Serverless

One of our specialties is building up serverless applications with a minimal need for operating resources.

Self-Service

Effort also means onboarding end users. Ideally, this is done without the DevOps team having to do anything, i.e. as self-services. This reduces effort and accelerates processes.

Acceleration

We are helping the development to speed up their development process by setting up a near to production environment on the local development device like a laptop.

Problem solving

We have a deep know-how in the tools and processes we are using. With our experiences from a lot of projects, we know how the stuff is working and can provide solutions for really challenging problems.

Our supported technologies

We support a wide range of applications to operate your infrastructure

All
Cloud
Container
DevOps
Monitoring
CI/CD
OS
Languages
DevSecOps
IDP / IAM
Data
AI

The Amazon Web Services are maybe the oldest provider of a public cloud with maybe the highest amount of services.

Azure by Microsoft is one of the biggest public cloud provider. It is deeply integrated into the Microsoft universe.

IONOS Cloud is a german public cloud provider with a wide range of managed services like S3-storage, databases, kubernetes, virtual machines (VM).

Terraform by Hashicorp is an open-source Infrastructure as Code (IaC) tool to manage hundreds of cloud services in AWS, Azure, Kubernetes ... .

Vagrant by Hashicorp is the tool to provide a local development platform even with a complex infrastructure like Kubernetes. It reduces the development effort enormously.

Red Hat Ansible is an Automation Platform to deploy IT-Infrastructure on a wide range of Devices (e.g. Linux-Server)

CloudFormation is the Infrastructure as Code (IaC) tool for Amazon Web Services (AWS).

HELM is the package manager for Kubernetes to simplify the deployment of bigger architectures in Kubernetes.

Artifactory by jFrog is a universal management system for artifacts like Docker container, Helm Packages, ...

Xray by jFrog is a system connected to Artifactory to scan the artifacts for vulnerabilities (CVE).

Prometheus is an open-source time-series database to organize the metrics and alerts for your infrastructure.

Grafana is an open-source web application to analyze and visualize metrics. It is working together with Prometheus.

ElasticSearch is part of the ELK Stack together with Beats, Logstash and Kibana. ElasticSearch is the database to store all metrics and logs.

Kibana is part of the ELK Stack together with ElasticSearch, Beats and Logstash. Kibana is the analyzing and visualizing tools for all metrics and logs.

Logstash is part of the ELK Stack together with ElasticSearch, Beats and Kibana. Logstash is the tool to provide logs for ElasticSearch.

Beats is part of the ELK Stack together with ElasticSearch, Logstash and Kibana. Beats is the tool to provide metrics for ElasticSearch.

Datadog is a fully managed service for monitoring and security with metrics, alert and log anayltics. It reduce operating of own monitoring infrastructure.

GitLab is a platform for the source code management. Additionally, GitLab provides a CI/CD tool to deploy software or architectures.

Jenkins is the leading open-source tool to build Ci/Cd pipeline. It is widely used for the automation of software builds or to deploy architectures in the cloud.

CentOS is an open-source operating system based on Linux supported by RedHat.

Debian is an open-source operating system for Linux completely driven by the open-source community.

Alpine is an open-source, security-oriented, lightweight Linux distribution to provide very small microservices.

Golang is an open-source programming language which is very suitable to build RestAPI-based applications for different OS-Platforms.

Python is an open-source programming language which is widely used in application, e.g. for the coding of Pipeline in Jenkins.

FLASK Appbuilder is a Rapid Application Development (RAD) Framework to develop a web application as fast as possible. A user and role management ist included out-of-the-box.

Angular is our language to build up web applications. Angular is built on TypeScript with the usage of HTML, CSS and JavaScript

SQL and PL/PgSQL are standard query languages to manage relational databases and manage the data content. PL/PgSQL is a SQL procedural language for PostgreSQL.

OpenSSL is an open-source application for cryptography and to provide SSL/TLS keys and certificates.

The JSON Web Tokens is an industry standard method to share valid ans secured information about the token requester between two parties. It is widely used by identity providers like AWS-Cognito, Keycloak, ...

Vault by Hashicorp is a system to centralized the management of secrets like passwords or certificates and other sensitive data. A lot of engines allows the connection from various applications like Kubernetes.