Micro-Segmentation Pilot (App Pair)
Core Infrastructure
PS
Pilot • Foundation
Code: micro-segmentation-pilot-app-pair • Version: v1.0 • Date: 2025-09-14 • Owner: Virtus Group — Core Infrastructure
Summary. Pilot identity‑/label‑based segmentation for one application pair (e.g., web ➜ DB) to reduce lateral movement risk without major network changes.
Who it's for. Teams concerned with ransomware spread or compliance who need demonstrable east‑west controls before expanding to more apps.
Business Outcomes
- Application dependency map built for the pilot pair.
- Allowlist policy deployed with monitored block events.
- Reduced lateral movement paths confirmed in tests.
- Operational procedure for change control established.
What’s Included
| Scope | Description |
| Core Inclusions |
- Discover flows between pilot app pair; build dependency map.
- Label assets and define least‑privilege allowlist policy.
- Enforce policy in monitor‑then‑block mode with rollback.
|
| Optional Add‑Ons |
- EDR signal fusion for process‑level policy.
- vCenter/K8s integration for dynamic labels.
- SIEM export and dashboards.
|
| Assumptions |
- Access to endpoints/VMs; change window available.
- Pilot limited to one app pair; no production outage tolerance.
|
| Out of Scope |
- Full data‑center segmentation; micro‑DMZ redesign.
|
Timeline & Deliverables
| Phase | Activities | Deliverables | Indicative Duration |
|---|
| 01 — Discover |
- Identify pilot app pair and inventory
- Map dependencies and define policy
|
- Pilot plan + dependency map
|
0.5–1 day |
| 02 — Implement |
- Apply labels/agents and enable policy
- Monitor traffic and switch to block where safe
|
- Policy enforced with documented exceptions
|
1–2 days |
| 03 — Validate |
- Validate resilience and rollback
- Report results and recommend expansion
|
- Pilot report with risk reduction evidence
|
3–5 business days |
Service Levels (Summary)
| Plan | Coverage | Response / Restore | Governance |
|---|
| Bronze | {{SLA_BR_COVER}} | {{SLA_BR_RR}} | {{SLA_BR_GOV}} |
| Silver | {{SLA_SI_COVER}} | {{SLA_SI_RR}} | {{SLA_SI_GOV}} |
| Gold | {{SLA_GO_COVER}} | {{SLA_GO_RR}} | {{SLA_GO_GOV}} |
Detailed terms, T&M policy, and prepaid blocks per Pricing Annex v2.13 (client‑safe). • Last updated: 2025-09-14
Start the pilot
Lite
Standard
Plus
Early Adopter Program (limited): 10% off the pilot package for customers who start by <date>. Not combinable with other offers. May be applied as a credit on close-out.
Terms: see Pricing Annex v2.14.