Moon Cloud

Assurance - Cybersecurity - Compliance

What is
Moon Cloud?

The platform for continuous compliance assessment and assurance evaluation of ICT applications and infrastructures.


It enables infrastructure/application owners to have a complete verification of their services during operation. Though generic, it mainly targets cybersecurity and AI/ML assurance.

Why Moon Cloud?

Cybersecurity often depend on layers that are neither visible nor accessible.
Opacity reduces users’ trust in modern ICT systems. 
Moon Cloud is a non-intrusive platform for compliance assessment and assurance evaluation that brings transparency to the whole ICT application/infrastructure.

Like moonlight it lets you see through the cloud without dissipating it like sunlight would do

Transparency and Trustworthiness

Makes the system transparent (including the ones based on AI/ML) allowing inspection, audit etc.
Increases trustworthiness attracting customers

Compliance to Standards

Makes applications compliant to Cybersecurity, AI and Data protection standards providing a better control.

Centralized Governance

Faster Reaction to disaster.
Coherent global overview of the non-functional posture of your ICT infrastructure

Assurance vs. Cybersecurity

Cybersecurity: a way to actively protect assets (data and applications) by internal and external threats and attacks, to provide an environment where customers interact in a secure way.
Assurance: the way to gain justifiable confidence that infrastructure and/or applications will consistently demonstrate one or more non-functional properties, and operationally behave as expected.

Security includes mechanisms necessary to provide a given security property (e.g., encryption, access control…)
The notion of assurance instead complements the one of security by providing methodologies for collecting and analyzing evidence that can prove or refute security properties (e.g., audit, certification, compliance techniques…).

How it Works

Moon Cloud inspects and evaluates the compliance of modern ICT systems using distributed probes, which implement deep analyzers called controls.

Moon Cloud provides a platform for the definition and execution of such controls.
Moon Cloud users:
1 – Connect to Dashboard
2 – Describe the system to be evaluate (targets inventory)
3 – Select/design and configure/deploy controls to be executed on the target system
4 – Schedule the execution of controls
5 – Access compliance evaluation results at different levels of detail through the dashboard
6 – Receive notifications in case of issues and the relative recommendations to solve them.

Why Choose Us

A centralized intuitive solution to govern cybersecurity compliance of your ICT infrastructure

Modern ICT Infrastructure

Specific controls for public clouds (e.g., AWS)
Support for ad-hoc controls for on-premises infrastructures
Compliance rules for relevant standards (e.g., Agid, GDPR, NIST, ACN, NIS2)
Threat monitoring based on VA/PT controls

AI/ML Based Applications

AI/ML specific controls monitoring models at runtime
Compliance of the ML development process (e.g., CapAI, ALTAI)
Assurance monitoring of AI/ML performance

Edge Cloud Continuum

Large-scale evaluation of continuum infrastructures composed of heterogeneous devices and domains
Lightweight controls for IoT devices
Controls for 5G core networks and edge nodes

Characteristics

Based on Models and Evidence

Scientifically validated models and collection of concrete evidence to support trust

Fully automatic and customizable

Fully customizable and ad hoc compliance based on business needs

Address Multilayers

Allows deep dive in the hidden layers affecting cybersecurity

Continuous Evaluations

Non invasive continuous monitoring and testing for compliance

Non-Tamperable System

Secure collection of evidence via non-tamperable probes

Assess Systems based on AI/ML

Deep inspect on AI/ML based systems and models.

Supported Standards

Following some of the supported standards… many more coming soon

What are you waiting for?

Ready to Govern Compliance and Cybersecurity of your system?

Our Team

A unique cocktail of technical expertise, creativity, and deep scientific insights.

Ernesto Damiani

CEO

Full Professor, Senior Director of the Khalifa University Center for Cyber Physical Systems

Marco Anisetti

CTO

Full Professor, Service and Cloud Certification expert. Cybersecurity in IoT expert

Claudio Ardagna

R&D

Full Professor, AI and ML Certification and Compliance expert. Big Data and privacy expert

Valerio Bellandi

R&D

Professor, LLM and recommender system expert, systems administration expert

Filippo Gaudenzi

Chief Developer

Ph.D. Full stack developer, cloud services and deployment technology experts

Our work in numbers

Long experience in R&D

Projects funded

+15

REceived Funds

+20M

experience

+25y

controls

+50

Explore Our Blog

Assurance of ML applications

The widespread use of machine learning (ML) for advanced[…]

What is Compliance

Compliance refers to the act of adhering to or[…]

What is Assurance

Assurance is the way to gain justifiable confidence that[…]

Contact us

SpinOff – Università degli Studi di Milano – founded in 2017