Battle-tested cybersecurity for global finance and regulated industries.
13 years. 120+ clients worldwide. Penetration testing on critical defense systems, classified government engagements, and the trust of Israel’s largest banks. Headquartered in Limassol, Cyprus. Serving fintech, defense, and enterprise across Europe and worldwide.
Four doors into our practice.
This is not a one-page brochure. Pick the door that matches what you came for, and you’ll find the depth behind it — services, case studies, industries, the team.
Twelve cybersecurity service lines.
Penetration testing, GRC and compliance, cloud security, incident response, and eight more — each delivered by named, accountable specialists with senior certifications.
Explore our services → IndustriesBuilt for regulated industries.
Deep operational experience in financial services, defense, government, healthcare, and critical infrastructure. We speak the language your auditors and regulators expect.
See how we serve finance → Case StudiesHow we handle real incidents.
A flagship recovery engagement for a major defense-adjacent organization. Active incident response, embedded recovery team, audit-ready post-incident hardening.
Read the case study → Our TeamThe practitioners behind every engagement.
Senior cybersecurity leadership with hands-on engagement history across Israeli finance, government, and defense. CISSP, CISM, OSCP, ISO 27001 Lead Auditor — verified credentials.
Meet the team →The credentials are real. The engagement history is verifiable.
Operating since 2012 with a practice that has supported organizations across the most demanding security and compliance landscapes.
Senior practitioners. Named and accountable.
Every cyber engagement at AlphaDevs runs under a named director with hands-on history in the environments our clients operate in: banks, government, defense, and critical infrastructure.
Director of Cybersecurity
Raphy Bitton
Raphy has spent more than 13 years in operational cybersecurity, leading engagements across Israeli national security, financial services, and critical infrastructure.
His hands-on background includes classified government work, penetration testing of critical defense systems, and security architecture for Israel’s largest financial institutions. He sets the methodology for every cyber project we deliver and owns its quality.
- CISO
- CISSP
- CISM
- CCSK
The bench behind him
Specialists for every part of the engagement.
- Lead Penetration Tester 12+ years, OSCP, CEH
- GRC and Compliance Lead ISO 27001 Lead Auditor, CISM
- Cloud Security Architect AWS, Azure, GCP
- Infrastructure and OT Security CISSP, SCADA
- DevSecOps Engineer CKS
- Incident Response Lead GCIH, GCFA
When an incident hits, a responder picks up. Day or night.
Our incident response and security operations unit works around the clock, every day of the year. It is staffed by operators from government, military, and corporate security backgrounds: people who have run real breaches, not tabletop exercises.
Incident response and crisis command
A responder takes command within the first hour. One war room runs the technical response, the legal and regulatory reporting, and the messages to your board, customers, and press, so your team can keep running the business.
24/7 SOC and MDR
Analysts from Tier 1 to Tier 3, in house, on a follow-the-sun rotation. Every alert is checked by a person before it reaches you, and confirmed threats on your servers and laptops are contained on your behalf. It runs on our tooling or on the EDR you already own.
Offensive security
Red team exercises, penetration testing, and threat intelligence, run the way an attacker would approach you. We find the open doors first, so an attacker doesn’t.
Hands-on training on a cyber range
Your security team practices real incident scenarios on a live range. The first time they face an attack should be in training, not in production.
- ScopeConfirm the incident and map how far it reached.
- ContainCut the attacker’s access without destroying evidence.
- EradicateRemove every foothold and close the way in.
- RecoverBring systems back to a clean, monitored state.
- ReportRoot cause, impact, and the fixes that stop a repeat.
Under GDPR, a personal data breach generally has to be reported to the regulator within 72 hours of becoming aware of it. We fix the timeline, assess what is reportable, and prepare the notification while the technical response runs.
AI clusters and correlates alerts at machine speed. An analyst reviews and approves every action before it touches your environment.
One partner across the whole lifecycle.
Start with the problem in front of you. Each line is delivered by the same practice, under the same director.
Industries we serve
Vertical-specific methodology in regulated industries. Where compliance, audit posture, and operational continuity dominate the conversation.
Compliance frameworks we cover
End-to-end readiness across the regulations your auditors are asking about — built into the assessment, not bolted on after.
Start with a Senior Strategy Session.
A working session with our senior team on your enterprise readiness and regulatory exposure. You leave with a clear read on where you stand against DORA, NIS2, and your auditors’ expectations.
Talk to our cyber team