Servizzi

Sovereign, quantum-safe engineering services

Servizzi ta' konsulenza u arkitettura li jmexxu l-organizzazzjonijiet lejn sistemi lesti għall-post-kwantum, sovrani u ta' grad industrijali — mill-ewwel valutazzjoni sal-industrijalizzazzjoni sħiħa.

Proven sovereignty

EU data residency, legal control, European encryption and HSMs, documented subcontracting chains.

Konformità bid-disinn

Evidence packs, ICT registers (DORA), exit plans (Data Act), identity and trust (eIDAS / EUDI).

Eżekuzzjoni mkejla

SLA/SLO commitments, KPI/OKR tracking, contractual reversibility, open formats and APIs.

Offerti strateġiċi

Each offering pairs a clear deliverable with its business value and its intended client focus.

Quantum-Safe Architecture Assessment

Evaluate cryptographic exposure, TLS, identity and key management against post-quantum threat models.

Valur: Ħarsa ċara u prijoritizzata tar-riskju kwantistiku qabel ma jsir esponiment.
For: Banks, insurers, critical infrastructure and regulated enterprises.

Pjan ta' Migrazzjoni Post-Kwantistika

Pjan bil-fażijiet, allinjat mal-istandards, biex jiġu migrati s-sistemi lejn kriptografija ibrida u lesta għall-era post-kwantistika.

Valur: Triq ta' tranżizzjoni li tista' tiġi difiża u awditjata, b'kontroll tal-ispejjeż u tar-riskju.
For: CISOs, regulators-facing organizations and public operators.

Sovereign AI Architecture

Design and deploy AI systems with European data residency, governance, traceability and guardrails.

Valur: Kapaċità ta' AI affidabbli mingħajr ma titlef il-kontroll fuq id-dejta u l-mudelli.
For: Institutions, industrials and deeptech scale-ups.

Robotics & Autonomous Systems Architecture

Architect robotics and fleet platforms on ROS 2, edge AI and secure, resilient communications.

Valur: Industrial autonomy built on a secure, maintainable foundation.
For: Industrial, logistics, defense-adjacent and energy operators.

Quantum-Inspired Optimization Consulting

Apply classical and quantum-inspired solvers to routing, scheduling and allocation problems.

Valur: Gains ta' effiċjenza mkejla llum, mingħajr pretensjonijiet kwantistiċi mhux ippruvati.
For: Operations, supply chain and industrial engineering teams.

Cloud Privat u Infrastruttura Sigura

Ibni landing zones sovrani, pjattaformi on-prem u ibridi msaħħa b'DevSecOps u osservabbiltà.

Valur: Bażi riversibbli u konformi għax-xogħlijiet sensittivi u kritiċi.
For: Public sector, finance and industrial organizations.

AI Research Copilot Development

Develop research assistants that read literature, extract concepts and generate experiments and notebooks.

Valur: Ċikli ta' riċerka u inġinerija aktar mgħaġġla u aħjar iddokumentati.
For: R&D labs, deeptech founders and innovation programs.

Enterprise Architecture Refactoring

Modernize, secure and document legacy enterprise architectures around clear, governed standards.

Valur: Reduced technical debt and a credible path to industrialization.
For: Large enterprises, integrators and platform operators.

Katalgu tas-Servizzi u Prezzijiet Indikattivi (EUR, mingħajr VAT)

Kodiċi	Servizz	Deskrizzjoni	Key Deliverables	Scope (w)	Firxa tal-Prezz
AUDIT	Sovereignty & Compliance Fast-Track Audit (GDPR + NIS2)	Valutazzjoni aċċellerata u kompleta tal-pożizzjoni ta' sovranità u konformità. Nimmappjaw id-data, l-assi u l-flussi; nanalizzaw id-diskrepanzi kontra r-rekwiżiti ewlenin (GDPR: bażijiet legali, reġistri tal-ipproċessar, DPIA, drittijiet tas-suġġetti tad-data; NIS2: governanza tar-riskju, logging, rispons għall-inċidenti, kontinwità, katina tal-provvista); nevalwaw il-kontrolli tekniċi/organizzattivi; u nivverifikaw ir-residenza tad-data u r-reżiljenza. Jinkludi workshops mal-partijiet interessati, reviżjoni tad-dokumenti, u kampjunar tekniku (IAM, kriptografija, logs, backups). Rapport eżekuttiv u operattiv: reġistru tar-riskji prijoritizzat, azzjonijiet rapidi ta' 30/60/90 jum, backlog ta' rimedju, RACI, KPIs ta' traċċar, u trajettorja ta' konformità. Għażla: pakkett ta' evidenza lest għal awditi minn terzi.	Analiżi tal-lakuni, reġistru tar-riskji, pjan ta' 90 jum	3–5	25k–60k
SLZ	Sovereign Landing Zone. EU qualified cloud	Design and deploy a sovereign EU Landing Zone (accounts/projects, networking, security, identity) using Infrastructure as Code. Scope: network segmentation (VPC/VNet, private links), policies and guardrails, EU KMS/HSM-managed encryption, identity and access (SSO, RBAC, PAM), key/secret management, centralized logging with SIEM integration, backups, bastions, tagging/FinOps. Aligned to GDPR/NIS2 (data residency, timestamped logs, separation of duties). Knowledge transfer and documentation (runbooks, diagrams, ADRs). Option: CI/CD pipelines for environments and ready-to-use workload blueprints (Kubernetes/VM/Serverless).	LZ design, IaC, identity, logging	5–7	60k–120k
MCP	MCP Server + EU LLM PoC	Waqqaf assistent tal-intrapriża sigur ibbażat fuq MCP (Model Context Protocol) u LLMs ospitati/ipproċessati fl-UE. Iddefinixxi każijiet ta' użu, qabbad sorsi tad-data (RAG, tfittxija interna), implimenta l-għodod MCP (għodod, politiki), salvagwardji (filtrazzjoni PII, limiti ta' azzjonijiet, logs tal-awditjar), u agħżel/ibbenċmarka mudelli (open-source jew fornituri tal-UE). Idploja fuq VPC/on-prem imsaħħa (netwerking privat, awtentikazzjoni b'saħħitha, iżolament taċ-ċwievet). Rapport ta' evalwazzjoni li jkopri l-kwalità/recall, rata ta' alluċinazzjonijiet, latenza/spiża, sigurtà, konformità, u rakkomandazzjonijiet ta' industrijalizzazzjoni. Għażla: portal tal-amministratur, telemetrija, u traċċabbiltà tal-prompt.	Secure assistant, guardrails, eval report	6–16	120k–260k
MIG	2–3 Migrazzjonijiet ta' Apps lejn cloud ikkwalifikat / on-prem imsaħħaħ	Programm ta' migrazzjoni għal 2–3 applikazzjonijiet kritiċi lejn cloud ikkwalifikat fl-UE jew pjattaforma on-prem imsaħħa. Passi: skoperta u mappjar (dipendenzi, data, SLAs), strateġija ta' destinazzjoni (rehost/refactor/re-platform), preparazzjoni tal-Landing Zone, tisħiħ tas-sigurtà (IAM, netwerking zero-trust, secrets), pipelines CI/CD, ittestjar tal-prestazzjoni u s-sigurtà, DR/backup. Pjan dettaljat ta' cut-over (twieqi, rollback, komunikazzjonijiet) u runbooks operattivi. Ġestjoni tar-riskji (kuntratti tal-fornituri, liċenzjar, kompatibilità), ġestjoni tal-bidla u handover. Riżultat: downtime minimizzat, sigurtà mtejba, osservabbiltà u kontroll tal-ispejjeż.	Target arch, runbooks, cut-over	9–17	180k–420k
OBS	Osservabbiltà u Fondament tal-Kwalità tad-Data	Establish the foundations of observability (logs/metrics/traces) and data quality. Tooling architecture (OpenTelemetry/agents, data catalog/lineage), logging standards, SLO/SLA metrics and error budgets, trace–log correlation, symptom-based alerting. On the data side: define dimensions (completeness, freshness, uniqueness, etc.), executable DQ rules in pipelines, controls at critical points, dashboards, and data contracts between producers/consumers. Integrate with incident/problem management, runbooks, and a maturity review. Result: end-to-end visibility, reduced MTTR, and higher trust in datasets.	DQ rules, SLAs, metrics, dashboards	5–10	70k–160k
DORA	DORA/TLPT readiness audit & remediation plan	Readiness assessment for DORA and TLPT (Threat-Led Penetration Testing) for financial entities. Scope definition and critical functions, ICT asset register, risk governance, operational controls (logging, backups, incident response), third-party dependencies and continuity. Build an evidence pack, article-by-article gap mapping, prioritized remediation plan with owners and deadlines. Pre-design a TLPT program: adversary-led scenarios, threat-intel objectives, legal prerequisites, and third-party coordination. Executive readout and a compliance/resilience roadmap.	Evidence pack, TIC register, scenarios	4–8	85k–190k
EUDI	eIDAS 2.0 / EUDI wallet integration blueprint	Integration blueprint for the European Digital Identity Wallet (EUDI) under eIDAS 2.0. Design the trust architecture (issuers, holders, verifiers), verifiable credentials & identity flows, QTSP integration and trusted lists, protocol choices and UX for journeys (onboarding, consent, selective disclosure, QES). Security: secure storage, proof-of-possession, replay protection, logging. Pilot use cases (KYC, qualified e-signature, application access), KPIs (conversion, latency, fraud prevented), and governance (attribute lifecycle, revocation). Compliance dossier and industrialization plan.	Trust architecture, pilots, KPIs	8–16	220k–480k
RUN	Managed Sovereign Ops — NOC/SOC/FinOps	Sovereign managed operations with NOC/SOC/FinOps. 24/7 monitoring, detection and response, change and vulnerability management, patching, backups/DR tests, compliant log retention. SOC: use cases, correlations, threat hunting, reporting, and post-incident guidance. FinOps: tag-based allocation, resource optimization, budget alerts, and monthly reviews. SLA-backed commitments (response times, availability), tailored runbooks, and monthly/quarterly steering committees. Integrates with the client's tooling or a Eurathos-managed stack.	Monitoraġġ 24/7, ġestjoni tal-inċidenti, rapporti	—	12k–45k / xahar
CIO	CIO/CISO Advisory Retainer	CIO/CISO advisory on retainer. Gwida strateġika u appoġġ għad-deċiżjonijiet (make/buy, cloud sovran, dejta/IA), tfassil ta' programmi, kumitati ta' tmexxija, preparazzjoni tal-bord, u sorveljanza tal-konformità (GDPR/NIS2/DORA/eIDAS). Reviżjonijiet tal-arkitettura u s-sigurtà, diliġenza dovuta tal-fornituri, appoġġ għal RFP/RFI, u koċċjar tat-tim. Jinkludi numru definit ta' jiem fix-xahar, kanal ta' prijorità, u sessjonijiet tematici (kriżijiet ċibernetiċi, kontinwità, IA responsabbli). Deliverables regolari: briefs eżekuttivi, roadmaps, u rakkomandazzjonijiet prattiċi.	Board briefs, steering, reviews	—	6k–20k / xahar

Riżultati f'90 jum

Awditu tal-konformità lest għar-regolatur (rapporti u provi).
PoC MCP + LLM EU operazzjonali għal każ ta' użu konkret.
Landing zone sovrana deployed u plan de reversibilite jiffirma.

Referenzi u Ekosistema

Cloud & tikketti: ekosistemi kkwalifikati Ewropej (SecNumCloud / ENS / C5).
AI: Mistral, Aleph Alpha (deployments privati fl-UE).
Servizzi ta' fiduċja: QTSP, firem kkwalifikati, EUDI Wallet.
Sejħiet pubbliċi: TED/eForms u kodiċijiet CPV rilevanti.

SLAs & SLOs

Tweġiba: P1 fi 30 min (24/7), P2 fi 4 sigħat (sigħat tax-xogħol), P3 fi 2 ijiem.
Disponibbiltà : 99.9% fix-xahar għas-servizzi maniġġjati.
Rappurtar: dashboard KPI/OKR mensili, reviżjoni eżekuttiva kull tliet xhur.

Kundizzjonijiet

Prezzijiet mingħajr VAT, liċenzji, konsum tal-cloud u vjaġġi.
Aċċess għall-partijiet interessati, is-sistemi u d-dokumentazzjoni garantit mill-klijent.
Awtorizzazzjonijiet ta' sigurtà possibbli (impatt fuq il-perjodi ta' żmien u t-tariffi).
Modifiki permezz ta' Change Requests fil-proġett Jira SVC-PORTFOLIO.