romanstrobl.net

What It Is

Roman Štrobl provides consulting services in cybersecurity, software backend development, and test automation, based in Prague, Czech Republic. According to the website, the core offering is not a standardized security product, but expert consulting and custom engineering delivery, with a focus on cryptography, post-quantum solutions, PowerAuth and other secure authentication protocols, as well as Java/Spring/database backend systems.

Core Capabilities and Protection Scope

In terms of protection types, its strengths are concentrated in applied cryptography: ECC, post-quantum algorithms, ECC + ML-KEM hybrid key exchange, end-to-end encryption, authentication code computation, and secure algorithm negotiation. The showcased PowerAuth post-quantum upgrade project emphasizes production-grade integration into financial application authentication protocols while maintaining backward compatibility with existing deployments. As for deployment model, the available text only confirms that it helps teams integrate cryptographic capabilities into mobile, web, and banking authentication systems through consulting and custom development. It does not describe a cloud service, SaaS console, or managed security operations model.

Pricing, Management, and Integrations

The website does not publish pricing, billing methods, contract models, payment methods, or support SLAs, so it can only be assessed as project-based consulting that requires direct contact. For management and alerting, there is no disclosed centralized console, monitoring and alerting, ticketing, or continuous response mechanism; therefore, it should not be considered an MDR, SOC, or security platform service. Its integration capabilities are relatively clear, covering Java, Spring, databases, PowerAuth, ECC, ML-KEM, SIKE, as well as test automation framework selection and migration planning.

Pros and Cons

The advantages are that the background and project descriptions are highly technical, covering banking security infrastructure, post-quantum cryptography prototypes, production-grade protocol migration, backend performance optimization, and QA automation audits. It is well suited to highly complex engineering problems. The drawbacks are also clear: there is no information on compliance certifications, customer references, pricing, delivery boundaries, or service support. The individual consultant model also means buyers should carefully verify capacity for parallel delivery, long-term operations, and large-scale rollout before procurement.

Who It’s For and Access from China

It is better suited to fintech companies, bank-related vendors, R&D teams that need to validate cryptographic migration, and enterprises looking to audit test automation strategy or optimize Java backend performance. Access from China cannot be determined from the main content and should be marked as unknown; payment and contract terms also need to be confirmed separately. If local compliance, Chinese-language delivery, MLPS/commercial cryptography assessment support, or on-site support is required, domestic alternatives such as 奇安信, 安恒信息, 绿盟科技, and 启明星辰 can be evaluated in parallel.