LuxGap
Compliance and security
Outsourced DPO and CISO mandates, audits and penetration tests, dark-web monitoring, business continuity, 24/7 managed SOC, training. This is the division that publishes LuxGap DevOps.
The LuxGap group · LuxGap, LuxApps, LuxOps
Monitoring the code is good. Hosting, backing up, protecting and making compliant your whole software is better.
A single Luxembourg team takes charge of your application’s full lifecycle: sovereign hosting, daily backup, secrets vault, legal compliance of your website and multi-site distribution for ultra-high availability. One contract under Luxembourg law, one point of contact.
The group
Three divisions, one team
LuxApps
Development
Business applications, custom modules, takeover and modernisation of existing software. This is the division that builds the code and takes it over when a provider fails to deliver.
LuxOps
Operations
Sovereign hosting, managed services, network, workstations, hardware and printing. This is the division that runs the infrastructure, in Luxembourg, with recovery in Germany.
About twenty lawyers, cybersecurity engineers, developers and system administrators under one roof in Kahler, Luxembourg, serving financial institutions, healthcare organisations and public entities subject to the CSSF, the CNPD, DORA, NIS2 and the GDPR.
Host
Sovereign hosting, under Luxembourg contract
Your application is hosted on the group’s infrastructure in Luxembourg, with a recovery site in Germany. Virtualisation and distributed storage with no proprietary licence (Proxmox VE, Ceph), no dependency on a non-European cloud, contracts under Luxembourg law. DORA, NIS2, GDPR and CSSF-circular compliance is tracked continuously, with the evidence in the same portal as LuxGap DevOps.
Hosted in Luxembourg, recovery in GermanyNo dependency on a non-European cloudVirtualisation and distributed storage with no proprietary licence99.97% availability on the LuxOps infrastructureContracts under Luxembourg lawCompliance evidence filed in the portal
Daily copy of code and databasesEncrypted backups, isolated from productionContinuous integrity verificationOn-demand restoration and restoration testBackup server in Luxembourg
Back up
Backed up every day, restored on demand
Your code and databases are copied every day to a LuxGap server in Luxembourg, encrypted and isolated from your production environment, out of reach of ransomware. Backup integrity is verified continuously and restoration is done on demand, with a restoration test whenever you wish.
Protect
Your secrets out of the code, in a vault nobody sees
LuxGap DevOps detects plain-text secrets in your code. The group provides the place to put them: a dedicated Vaultwarden vault, hosted behind VPN, with no Internet access, reserved for your teams. No more API keys in configuration files and passwords in repositories.
Dedicated Vaultwarden vault, behind VPN, no Internet accessSecure sharing between developers and administratorsCorrelated with the portal’s “plain-text secret” findingsHosted on the group’s infrastructure in Luxembourg
Make compliant
A compliant website, proven by a DPO and CISO firm
LuxGap is first and foremost a firm of outsourced DPOs and CISOs. We bring your website and application into compliance and provide the evidence: legal notice, terms and conditions, privacy policy, cookie and consent management, records of processing, impact assessments, information to data subjects, AI Act documentation if your site embeds artificial intelligence, NIS2 and DORA obligations if you are subject to them.
Legal notice, terms and conditions and privacy policy drafted by our lawyers
GDPR-compliant cookies and consent
Records of processing and impact assessments
AI Act documentation for artificial-intelligence functions
Outsourced DPO or CISO mandate if you need one
Evidence filed in the same portal as your code
Ultra-high availability
Distributed across three sites for ultra-high availability
Your application is distributed across three sites, in Luxembourg, France and Germany. Load is balanced, data is replicated continuously and failover is automatic: if a site goes down, your users never notice. The 24/7 SOC monitors the whole.
Load balancing across three sites: Luxembourg, France, GermanyContinuous data replication between sitesAutomatic failover, no single point of failureSupervision by the 24/7 managed SOCFor security reasons, the precise location of the sites is not published
Monitored 24/7, tested permanently
24/7 managed SOC
LuxGap’s SOC collects the logs of your application and infrastructure, correlates alerts and escalates to our team. Critical findings from LuxGap DevOps can optionally feed into it.
Penetration tests
LuxGap experts perform manual penetration tests of your application and infrastructure, complementing LuxGap DevOps’ automated pentest.
Billing
One invoice, one contract, one point of contact
LuxGap DevOps
€0.01 excl. VAT per line of code per month. Minimum €250 excl. VAT per month. 12-month commitment.
Group services
Hosting, backup, secrets vault, legal compliance, multi-site, SOC, manual pentest: on quote, added to the same contract, each available separately.
A single framework
Contract under Luxembourg law, one point of contact, reply within 24 h.
Frequently asked questions about the group’s services
Do I have to take all the services?
No. LuxGap DevOps works on its own, with your current hosting provider. Each group service is added separately, when you need it.
Can I keep my current hosting provider?
Yes. Code monitoring connects read-only to your forge, wherever your application is hosted. Sovereign hosting, backup and multi-site distribution are options.
Where are the servers?
In Luxembourg, with recovery in Germany; multi-site distribution uses three sites in Luxembourg, France and Germany. For security reasons, the precise location of the sites is not published.
Who is my point of contact?
A single LuxGap lead, who coordinates the three divisions and replies within 24 h. You never have to arbitrate between a host, a developer and a compliance firm.
How do I request an offer?
Fill in the subscription request and tick the options you are interested in. LuxGap replies within 24 h with a firm quote covering LuxGap DevOps and the chosen services.
Entrust your application’s full lifecycle to a single team
Code monitoring, hosting, backup, secrets, compliance, ultra-high availability: describe your software and we come back to you within 24 h with a bundled offer.
€0.01 excl. VAT per line of code per month for LuxGap DevOps · Group services on quote · Contract under Luxembourg law