Hannes Krauss
Founder and General Manager, Krasper Technologies
Hannes Krauss is the founder and general manager of Krasper Technologies. He has spent several years in cyber security inside enterprises with more than 10,000 employees, and as a consultant to banks, insurers and other critical-infrastructure operators, among them German automotive manufacturers.
Where the experience comes from
Two settings, the same problem seen from both sides.
Inside the enterprise. Several years of cyber security work in organisations of more than 10,000 employees, where a control is only real once it survives contact with the estate it is supposed to protect: legacy systems nobody may switch off, teams in a dozen time zones, and an audit calendar that does not move.
As a consultant. Engagements with banks, insurers and other operators of critical infrastructure, including German automotive manufacturers. Regulated industries share one trait: the security answer has to hold up in front of an auditor as well as in production, and an answer that only does one of those is not an answer.
Why the company is built the way it is
Every Krasper platform is self-hosted: it runs on the customer’s own hardware, under the customer’s own operation, with no Krasper access unless it is asked for.
No Krasper access unless it is asked for. Every platform runs on the customer's own hardware, under the customer's own operation.
Based in Dubai, serving regulated organisations across the UAE, the GCC and the EU.
The person who scopes an engagement is the person who works on it.
What I work on
UAE compliance
What the UAE IA (NESA) Standards require: 188 controls in 15 families, the Always Applicable set listed in full, and the P1 to P4 distribution.
The DESC Information Security Regulation: who it binds, how ISR v3 differs from v2, how it relates to ISO 27001, and what an assessment expects.
UAE PDPL, Federal Decree-Law No. 45 of 2021: who it covers, the rights it grants, breach duties, when a DPO is required, and why DIFC and ADGM differ.
Platform and consulting
Raigate enforces AI policy, redacts PII and logs governed requests to the database across API, browser and agent traffic. Self-hosted, air-gap deployable.
Cyber security consulting in Dubai. Our consultants are engineers: threat modelling, zero-trust, NESA and DESC ISR readiness, incident preparedness.
enterprise infrastructure?
Schedule a technical briefing. No sales pitch, just architects and your team.