Access under control. Security that holds.
Managing access is harder than it has ever been. Cloud, remote work, supply chain partners and devices have moved the digital perimeter from your network to the identity. Metro XS designs and builds the identity and security architecture that goes with it — and delivers in weeks, not years.
Four services, one coherent story
Identity, security, software and advice belong together. We do not deliver them as separate projects, but as one architecture that fits your organisation.
Identity & Access Management
One managed identity for employees, suppliers, customers and devices — with governance, self-service and demonstrable control.
Read more →Cyber security
Scans, assessments and preventive, detective and response measures. Approached from the identity, because that is where the perimeter now sits.
Read more →Software services
Custom development, integrations and APIs — built by small teams that learn your domain and hand over maintainable code.
Read more →IT consultancy
Enterprise architecture, roadmaps, vendor selection and second opinions. Independent, with a decision as the deliverable.
Read more →The perimeter has moved to the identity
Digital transformation, cloud and IoT have taken away the wall around the network. What remains as a boundary is the question of who has access to which information, when and why. That is precisely the question most organisations answer worst.
This is not a matter of unwillingness. It is the result of ten years of stacking systems without a single access model underneath. Until an audit, an incident or NIS2 makes it painfully visible.
- Orphaned accounts and permissions that are never revoked
- Third parties and suppliers without a demonstrable access process
- Administrative rights without a time limit or audit trail
- Manual joiner, mover and leaver processes that invite mistakes
- Audit questions that take weeks of work to answer
- Security policy on paper that is not enforced in the technology
What we have worked on
Our people work for organisations where continuity and regulatory oversight weigh heavily: grid operators and central government.
Enexis
A new work management system, including a document management system, for the electricity and gas work package.
Stedin
IAM services and consultancy around identity and access management.
Dutch central government
IAM services and consultancy in an environment with strict requirements for access and accountability.
Four steps from question to working solution
No eighteen-month programmes before anything becomes visible. We deliver in blocks of weeks, with working results along the way.
Discover
In two to three weeks we map the current situation: systems, processes, permissions and risks. You get facts, not assumptions.
Design
A target architecture with concrete choices: which model, which products, in which order and at what cost. Decidable on a single page.
Build
Implementation in short iterations, together with your own people. Every iteration delivers something that runs in production.
Hand over
Documentation, training and operating agreements. We do not build dependency, we build a team that can do it itself.
“We do not deliver a report that disappears into a drawer. At the end of an engagement you know who can access what, why, and how you can still prove it tomorrow.”
Small team, senior people
- Independent. We are not tied to a single vendor and advise what fits.
- Senior. The consultant who has the conversation also does the work.
- Concrete. Every piece of advice ends in a choice, a plan and a price.
- Transferable. We document and train as standard, not as extra work.
Where do you stand today?
Tell us in half an hour what is going on. You will get an honest assessment of what is needed — whether that is a three-week project or three quarters of work.
Book a no-obligation call