Built on the front lines

Our story

AmonSul was founded in Kyiv, Ukraine — not as a business opportunity, but as a response to necessity.

When Russia launched its full-scale invasion in February 2022, Ukraine became the most cyber-contested environment on Earth. Our team had already spent years building capability inside Ukrainian defence and intelligence structures, defending critical infrastructure against nation-state-grade attacks. We worked directly within the Ukrainian security environment and embedded with military intelligence units tracking APT campaigns targeting defence contractors, energy operators, and government institutions.

That experience is not a credential we list on a slide deck. It is the foundation of everything we do.

We built AmonSul because the same adversaries we tracked in Ukraine are now targeting defence-tech companies, critical infrastructure operators, and allied-nation government suppliers across Europe and beyond. The threat actors have not changed. The geography has.

What makes us different

Most MSSPs are built around compliance. We were built around adversaries.

Our analysts understand the specific TTPs of Russian, Belarusian, and Iranian threat groups — not from threat-intel reports, but from direct operational experience hunting them in live environments. We bring that same rigour to every client engagement, regardless of geography.

Our VATRA threat-intelligence platform was built from years of operational tracking. It is not a rebadged commercial feed. It is a proprietary capability developed in the field.

Our OneGuard ZTNA product was born from the same need: when perimeter-based defences fail — and under sustained nation-state pressure, they will — you need an identity-first, zero-trust architecture that assumes breach from day one.

Founder

Serhii Khariuk is a reverse engineer and malware analyst with over a decade of experience in offensive and defensive security. Before founding AmonSul, Serhii worked on malware analysis for Ukrainian defence and intelligence structures, contributed to incident response operations during active conflict, and is an organiser of DC8044 (DEF CON Group Kyiv) — Ukraine's chapter of the world's largest hacker community.

Serhii holds industry certifications in reverse engineering and incident response, and has spoken at security conferences across Ukraine and Eastern Europe on topics including nation-state malware, threat intelligence collection, and wartime OPSEC.

His technical focus remains hands-on: AmonSul's leadership team writes detection rules, reviews threat-intel reports, and participates in incident response engagements.

Our relationships

• NCCC — National Coordination Centre for Cybersecurity, Ukraine
• SSU Cyber — Security Service of Ukraine Cyber Department
• UA-CERT — Ukrainian Computer Emergency Response Team
• DefCon Kyiv (DC8044) — Organiser and speaker
• NATO CCDCOE — Cooperative Cyber Defence Centre of Excellence (partner engagement)