The people behind
BlueCyber
A founder-led practice, backed by a network
of senior specialists who have delivered together for years.
experience
in our network
front of clients
Adrian Boscu MSc.
Founder & Managing Director15+ years inside the hardest problems in enterprise security.
I've spent over 15 years working directly on complex infrastructure challenges across some of Europe's most demanding environments, OT and ICS security in regulated manufacturing, Zero Trust migrations across global multi-site organisations, cloud security architecture on AWS and hybrid infrastructure, and network security for institutions where failure simply isn't an option. That work has taken me through pharmaceutical, life-sciences, semiconductor and luxury-goods manufacturing, automotive, and European institutions. I hold an MSc in Cybersecurity from the University of Essex, plus CCNP and Palo Alto PCNSA certifications.
The pattern I kept seeing was the same: the most complex environments, the most demanding requirements, and the most junior hands assigned once the contract was signed. I founded BlueCyber as the alternative: I lead every engagement myself, and when a project needs more hands, I bring in senior specialists I have already delivered with.
When you work with BlueCyber, the person you speak to on the first call is the person accountable at final sign-off.
How we came to be.
BlueCyber was founded to fill a gap we kept encountering throughout our careers: organisations investing seriously in cybersecurity and infrastructure, only to find that the experienced consultants who sold the engagement were replaced by junior staff the moment delivery began.
BlueCyber is built differently. The person who assesses your environment is the person who fixes it, and no junior is ever placed in front of a client.
Many of us worked together under other brands before BlueCyber. Larger projects are staffed from this network of senior network, security and cloud engineers, for EU institutions, pharmaceutical manufacturers, semiconductor companies and global logistics firms. You get the capacity of a team without a bench of juniors behind it.
What makes BlueCyber different
We're not a large consultancy with a bench of juniors waiting to be staffed. We're a founder-led practice with a senior network, and we treat every engagement with the seriousness we bring to our own work.
Founder-led, every time
The architect you meet on day one leads your project to sign-off. No hand-offs, no rotation, no surprises.
No juniors in front of clients. Ever.
We don't use client engagements as training grounds. Every client interaction, from discovery call to final delivery, is handled by a senior professional.
Senior delivery, end to end
The expert who scopes your project is the expert who builds it. You get consistent thinking, accountability, and quality from assessment through to sign-off.
Proven at enterprise scale
From GxP-regulated pharma plants to semiconductor cloud estates and EU institutional networks, we know what enterprise-grade actually means.
14 specialists, brought in as needed
Every engagement is led by our principal architect. For larger programmes, we draw on senior specialists from our network who have delivered with us before.
Principal Architect
End-to-end solution design, infrastructure strategy, and technical governance. The architectural backbone of every engagement.
Network Engineers
Network infrastructure design, MSP operations, incident and problem management, and proactive monitoring with observability.
Project Managers
Delivery oversight, client coordination, and timeline management, ensuring every engagement runs on time and in scope.
DevOps & Cloud Architects
Azure and AWS implementation, CI/CD pipeline design and modernisation, infrastructure as code, and seamless hybrid integration.
Cybersecurity Engineers
Security audits, risk and vulnerability assessments, firewall configuration review, and structured threat remediation planning.
Each specialist has delivered with us on previous engagements. We staff to the project, so you only pay for the expertise you need.
Real problems. Real solutions.
A sample of work delivered by our founder and network members, directly and through partner consultancies. Client names are withheld where confidentiality applies.
Manufacturing OT networks needed tighter controls, but nobody had a verified picture of which machines needed to talk to what. Blocking the wrong flow would stop production.
What We DidWe analysed asset communication baselines, mapped application requirements with equipment vendors, and validated every new flow in the traffic logs before deploying restrictive rule sets. Controls were aligned with NIST SP 800-82r3 and ISO/IEC 27019.
- ✓ Verified communication baseline per environment
- ✓ Restrictive rules deployed without production impact
- ✓ Internal teams coached to run their own improvements
GxP-regulated manufacturing sites worldwide ran SCADA and industrial control systems with known vulnerabilities and limited segmentation, and changes had to respect validated production.
What We DidWe ran OT risk and vulnerability assessments against NIST 800-82 and IEC 62443, designed segmentation across Cisco and Palo Alto, monitored OT alerts in Splunk with the SOC, and designed backup, restore and disaster-recovery plans for the plants.
- ✓ Remediation roadmaps for global production sites
- ✓ Segmented, more resilient SCADA/ICS networks
- ✓ OT-specific backup and DR plans
A large AWS estate protecting critical semiconductor IP needed consistent network security across regions, plus secure access for a globally distributed workforce.
What We DidWe architected and run Palo Alto NGFW on AWS, led the Prisma Access rollout, and built CloudFormation templates so each new site deploys with the same firewall policies and access controls. IDS/IPS tuning and Splunk monitoring support incident response.
- ✓ Standardised, repeatable multi-site deployments
- ✓ Prisma Access live for a global workforce
- ✓ Faster detection through tuned IDS/IPS
Manufacturing sites needed network access control on wired and wireless networks, including legacy and industrial devices that don't support 802.1X.
What We DidWe designed and deployed 802.1X/NAC across the enterprise and extended it into OT. For devices that couldn't authenticate, we ran risk assessments and defined compensating controls, in line with IEC 62443 and Zero Trust principles.
- ✓ NAC enforced across IT and OT
- ✓ Compensating controls for legacy OT devices
- ✓ Rolled out with minimal operational disruption
New network infrastructure had to be implemented at headquarters and sites worldwide within a strictly ITIL-governed environment.
What We DidWe delivered the end-to-end implementation from low-level design, covering Cisco ACI, Palo Alto NGFW and Panorama, Aruba wireless and Splunk, and automated repetitive configuration steps to speed up rollout.
- ✓ HQ and international sites delivered
- ✓ Installation guides and runbooks handed over
- ✓ Smooth transition to operations teams
Sodexo needed an honest, expert-led picture of their firewall security posture across a complex, distributed multi-site environment. The priority was clarity: what was actually in place, what the gaps were, and how to close them.
What We DidBlueCyber conducted a comprehensive firewall security audit across Sodexo's estate, reviewing configurations, rule sets, access controls, and logging practices against current security standards. Findings were synthesised into a structured, prioritised remediation action plan.
- ✓ Full firewall estate assessed
- ✓ Vulnerabilities identified and classified by risk
- ✓ Prioritised remediation plan ready for implementation
iHub's clients were experiencing persistent performance degradation. Their firewall cluster was configured in active-standby mode but running under a single firewall, leaving the environment both exposed and underperforming. Standard troubleshooting wasn't finding the root cause.
What We DidBlueCyber investigated end-to-end and, working with iHub's upstream network service provider, identified a broadcast storm affecting iHub and multiple co-located clients. We coordinated remediation across organisational boundaries, restored full service, and delivered a comprehensive infrastructure renewal proposal.
- ✓ Broadcast storm eliminated across multiple clients
- ✓ Full client service restored
- ✓ Infrastructure renewal roadmap delivered
DB Schenker required a ground-up cloud infrastructure implementation across both Azure and AWS, no existing foundation to build on. Their CI/CD pipeline also needed a full modernisation to support a fast-moving engineering organisation operating at global scale.
What We DidBlueCyber delivered the full Azure and AWS implementation from scratch, modernised the CI/CD pipeline to the latest toolchain, and restructured repository responsibilities, creating a clean separation between ops and development teams so both could make independent changes without operational friction.
- ✓ Full cloud infrastructure live across Azure & AWS
- ✓ CI/CD pipeline modernised and operational
- ✓ Dev and ops teams operating independently
Ready to talk about your environment?
Tell us about your environment, a senior BlueCyber professional will respond within one business day with an honest assessment and a complimentary estimate.
Book a consultation