Network. Security. Cloud.
Secure infrastructure, engineered end to end.
Saber Security designs, secures, migrates, and operates multi-vendor infrastructure across edge, cloud, network, and identity, with a rollback path for every change. Our engineers work with teams across Europe and North America from our headquarters in Sofia, Bulgaria, and our digital studio builds the apps, websites, and games that run on it.
Experience behind every engagement
- More than seven years of enterprise network and security engineering, on premises and multi-cloud
- Staged DNS, SSL, WAF, and bot migrations covering hundreds of domains, with tested rollback paths
- Nine platforms in one portfolio, across cloud, firewalls, edge, and Zero Trust access
- One four-stage delivery model, from architecture and onboarding to migration and support
Experience delivering for teams at
- Greenyard
- Jack in the Box
- CBI Health
- NordClima
- FirmLocator
- SK Studio
Nine platforms, one connected design
Cloud on Amazon Web Services (AWS), Microsoft Azure, and Google Cloud. Firewalls and network security from Fortinet, Palo Alto Networks, Check Point, and Cisco. Edge security and CDN on Cloudflare and Akamai. Zero Trust access, SD-WAN, and automation with Terraform, Python, and serverless functions tie them together: we design how traffic, identity, and policy move between your clouds, your sites, and your edge.
- Google Cloud
AWS, Microsoft Azure, Google Cloud, Fortinet, Palo Alto Networks, Check Point, Cisco, Cloudflare, Akamai, and other product and company names are trademarks of their respective owners, used only to identify technologies and organizations. No affiliation, sponsorship, or endorsement is implied.
Seven services, three disciplines.
We start with an inventory of what exists and finish with documentation your team can operate from.
Network & Security
Firewalls, access, and boundaries you can explain.
Firewall and segmentation reviews on Fortinet, Palo Alto Networks, Check Point, and Cisco, SD-WAN, Zero Trust access, and cloud transit on AWS, Microsoft Azure, and Google Cloud. Every rule gets a purpose, an owner, and a rollback.
Cloud & Edge
Edge and cloud, configured as code.
Edge security and CDN on Cloudflare and Akamai: WAF, bot, and API protection, staged DNS and certificate migrations, and origin hardening. Terraform, Python, and serverless automation keep every environment consistent.
Digital Studio
Apps, websites, and games, built with the same discipline.
Customer portals, internal tools, APIs, websites with purposeful interaction, and playable prototypes.
How we work
The four-stage delivery model: Architecture, Onboarding, Migration, and Support. Each stage ends with a written acceptance check and a way back.
Architecture
Trace dependencies and traffic flows before choosing tools.
Output: architecture designs, traffic flows, and acceptance criteria.
Onboarding
Bring sites, applications, and people onto the platform with agreed baselines and a pilot.
Output: a configured platform, a security baseline, and a handover to your team.
Migration
Move traffic in staged waves, each with a go/no-go decision and a rollback step.
Output: a migration plan, a cutover runbook, and a validation record.
Support
Stay close to the system after launch: incident analysis, configuration reviews, and updated runbooks.
Scope and terms are agreed per engagement.
Trace a request through the architecture
Choose a scenario. Trace a request. Pick an element to see how the edge, identity, cloud, and network work together.
Delivery and protection
Cloudflare edge
We connect DNS, TLS, caching, application security, and origin behavior into one architecture that your team can own.
Cloudflare edge, Delivery and protection
Why Saber Security
Four commitments shape every engagement, whatever the platform and whatever the stage.
01
Multi-vendor by design
We work across AWS, Microsoft Azure, Google Cloud, Fortinet, Palo Alto Networks, Check Point, Cisco, Cloudflare, and Akamai, so the design follows your requirements and your existing estate, not one vendor’s product line.02
Every change has a way back
Changes move in staged waves, each with a written go/no-go gate and a rollback step. New security rules start in observe mode or on a low-risk subset before they enforce.03
Security from the first diagram
Identity, segmentation, inspection, and least-privilege access are designed into the architecture from the start, not added in a review at the end.04
Documentation your team can run
Every engagement ends with configuration in code, runbooks, and a handover session, so your team can operate and change the system without depending on us.
LeadershipEduard Agopyan, Founder & Principal ArchitectMeet our leadership
Engineering insights
Write-ups on networks, cloud, edge, and access, with the sources named and the verification date shown.
Migration
Firewall migration checklist: Fortinet, Palo Alto Networks, Check Point, and Cisco
A vendor-neutral firewall migration checklist: audit rules by hit count, map features, check which conversion tools are still supported, test flows, cut over.Architecture
Centralized inspection on AWS with Transit Gateway: patterns and pitfalls
Three ways to inspect traffic centrally on Transit Gateway: an inspection VPC, the Network Firewall attachment, or Gateway Load Balancer, with failure modes.Migration
How to migrate hundreds of domains to Cloudflare without downtime
Move DNS first and proxy second: the wave model, a cutover checklist, DNSSEC and certificate gates, and a per-hostname rollback, checked against the docs.
The digital studio
Customer portals, internal tools, websites, and playable prototypes, built on the same infrastructure discipline as our engineering work. Try the three original demos: a sample workspace, three website concepts, and a portal puzzle. They use sample data and concept art, and they are labeled as demos.
Original demos · Sample dataPlanned1
In progress1
Done1
Inventory sync
Good questions. Straight answers.
What does Saber Security do?
Saber Security is a network, security, and cloud engineering company headquartered in Sofia, Bulgaria. We design, secure, migrate, and operate multi-vendor infrastructure across edge, cloud, network, and identity: firewall and Zero Trust programs, cloud connectivity, edge security and CDN, and automation. Our digital studio builds apps, websites, and games on the same foundations.
How do you keep a migration from breaking production?
By testing each step before the next one. Every dependency is inventoried first, and traffic moves in staged waves, each with a go/no-go gate and a rollback step. New firewall and security rules start in observe mode or on a low-risk subset, and the previous platform stays ready until the new one has proved itself.
Can you take a project from architecture through support?
Yes. An engagement can cover discovery, design, onboarding, migration, validation, and handover, with deliverables and ownership agreed for your environment. Ongoing support is available, with scope and terms agreed per engagement. You can also bring us in for a single stage, such as a firewall review, a cloud network design, or an edge security audit.
Which platforms do you deliver on?
Amazon Web Services (AWS), Microsoft Azure, and Google Cloud; Fortinet, Palo Alto Networks, Check Point, and Cisco firewalls; and Cloudflare and Akamai at the edge, with Zero Trust access, SD-WAN, and automation in Terraform and Python. We design how these platforms connect across your existing estate and move changes onto them in stages you can roll back.
Who will work on our project?
A senior engineer leads every engagement, from the first inventory to the handover, so you have one accountable lead throughout. Scope, access, and working hours are agreed before work starts, and you receive configuration in code and a written runbook, so your team can operate and change the system without depending on anyone’s memory.