Based in Paris. Focused exclusively on AWS security and architecture. We fix the gaps, design infrastructure that holds up under pressure, and make sure your AWS environment doesn't become a liability.

Toc Consulting was founded with a clear mission: to help businesses leverage the full potential of cloud technologies while maintaining the highest security standards. With over a decade of experience in AWS and cloud security, we've grown into a trusted partner for organizations across the globe.
Our founder, Tarek Cheikh, recognized early on that cloud adoption without security-first thinking leads to costly mistakes. Having worked with complex AWS implementations and security challenges, he established Toc Consulting to help organizations navigate cloud adoption with confidence.
Today, we pride ourselves on delivering tailored cloud solutions that drive efficiency, innovation, and growth for our clients. Our expertise spans AWS architecture, AWS security, and cloud migration, always with security at the core.
Our core values shape how we work and guide our decisions as we help businesses transform through cloud technologies.
We strive for excellence in every aspect of our work, ensuring the highest quality solutions for our clients.
We embrace innovative technologies and approaches to solve complex challenges and drive business transformation.
We operate with transparency, accountability, and ethical standards in all our client relationships and business practices.
We believe in the power of collaboration, both within our team and with our clients, to achieve outstanding results.
We prioritize our clients' success, tailoring our solutions to meet their specific needs and business objectives.
We are committed to continuous learning and staying at the forefront of cloud technologies and best practices.
Toc Consulting is a focused AWS security and cloud architecture practice. We go deep on three things instead of a little of everything, and we staff every engagement with the right AWS specialists for the job.
Assessments, IAM hardening, compliance automation, threat detection, and incident response.
Well-Architected reviews, multi-account landing zones, and secure-by-design systems.
Security-first migrations with least privilege and encryption enforced from day one.
Beyond the founder, engagements draw on specialists across the disciplines that AWS security and architecture actually demand.
IAM, data protection, threat detection, and account hardening.
Well-Architected, resilient, multi-account designs built to scale.
Security-first moves to AWS with minimal downtime.
HIPAA, GDPR, SOC 2, and PCI DSS readiness and automation.
Containment, forensics, and recovery when something gets through.
Cutting AWS spend without weakening security.
Published research, open-source tooling, and a reference library the whole AWS community uses.
A reference card for every major service: attack surface, exploitation, and defenses.
KloudSec evaluates 300+ security checks across 100 AWS services.
lambda-security-scanner, AWSMap, and the AWS Security Arsenal: built in the open.
"The State of AWS Security 2026: From IAM to Agentic AI."
A security concern, an architecture that's not scaling, or an AWS environment that's grown out of control. Book a call and let's look at it together.
Book a Call