Sovereign hosting
Group infrastructure in Luxembourg, recovery in Germany, virtualisation and distributed storage without proprietary licences, 99.97% availability on the LuxOps infrastructure.
Under watch
Your application at the centre, five layers around it
Every layer is run by the same team. The radar is the SOC: it reads the logs of the whole estate, from the server to the Microsoft 365 tenant, and raises an alert within the first hour.
What the SOC sees
- 1Employee credentials for sale on the dark web
- 2Sign-in from an unusual country, MFA bypassed
- 3Lookalike domain ready for phishing
Regulatory clock
- DORA4 hinitial notification after classification
- NIS224 hearly warning to the authority
- GDPR72 hnotification to the CNPD
One team, from code to SOC
Without LuxGap
A developer, a host, a backup provider and a SOC that never talk to each otherAlerts that nobody reads at nightNotification deadlines that cannot be met
With LuxGap
The code finding, the SOC alert and the backup in the same chainA team in Luxembourg watching around the clockLawyers who draft the notifications to the CNPD, the ILR or the CSSFOne contract, one contact, an answer within 24 hours
The layers
Everything around your application
Daily backups
Code and databases copied every day, encrypted, isolated from production and out of reach of ransomware. Restore on demand.
Secrets vault
A dedicated Vaultwarden behind a VPN, with no Internet access: the secrets found in the code finally have a place to go.
Multi-site high availability
Load balancing and automatic failover between three sites, in Luxembourg, France and Germany.
Managed 24/7 SOC
Logs from servers, network, applications and Microsoft 365 and Google Workspace tenants collected and correlated by a sovereign SIEM/XDR, qualified by analysts in Luxembourg.
Dark web and impersonation
Employee credentials for sale, infected devices, lookalike domains ready for phishing, ransomware leak sites: watched continuously.
When an incident occurs
From the first alert to closure
- DetectSignals correlated, alert within the first hour.
- QualifyAn analyst confirms the incident, assesses the impact and rates the severity.
- ContainAccounts, devices or equipment isolated with your teams or your IT provider.
- NotifyOur lawyers draft and submit the notifications to the CNPD, the ILR or the CSSF on time.
- DocumentIncident report, evidence, and the code fix that prevents a recurrence.
Frequently asked questions
Do I have to host everything with LuxGap?
No. Code monitoring works with your current host. Hosting, backups, the vault, multi-site and the SOC are added separately, when you need them.
What exactly does the SOC monitor?
Anything that produces a log: servers, workstations, firewalls, applications, databases, Microsoft 365 and Google Workspace tenants, EDR, all the way to connected devices and buildings. Details on soc.luxgap.com.
Does the SOC read our emails?
No. The SOC never asks for the Global Administrator or Global Reader role, nor for access to the content of your emails or conversations. You receive the exact list of permissions before connecting anything.
Where is the data?
In the European Union. Applications are hosted in Luxembourg with recovery in Germany; SOC logs are stored and processed in the European Union.
You code. We run it, watch it and notify.
Describe your application and your infrastructure: LuxGap replies within 24 hours with a bundled offer.
€0.01 excl. VAT per line per month · Minimum €250 excl. VAT per month · 12-month commitment