Cybersecurity and information security for businesses
Helpdesk Bulgaria protects the computers, servers and network of businesses in Sofia and across Bulgaria with technical measures: endpoint protection, monitoring, backups, updates and access control. For NIS2 and ISO 27001 we offer a complete solution with one point of contact: we implement and maintain the technical measures (included in the Professional plan, for an extra fee on Standard), and the documentation, policies and risk assessment are prepared by our partner consultant.

What does the information security service include?
A company's security starts with technical foundations: protected devices, up-to-date software, backups that work, controlled access and monitoring that sees a problem before it stops the business. Antivirus protection, periodic vulnerability scans and group security policies are included in all plans. EDR and SIEM are included in the Professional plan and are an extra on Standard. They are also the technical basis that NIS2 and ISO 27001 require.
For NIS2 and ISO 27001 we are your single point of contact: we implement the technical side, and the documentation, policies and risk assessment are prepared by our partner consultant. Our cybersecurity services are built for small and medium-sized businesses: we follow good practices for information security without burdening your team with unnecessary procedures. We work on network and information security for companies across Bulgaria - for many of them, cybersecurity in Bulgaria is now also a legal requirement under NIS2 and the Cybersecurity Act.

We are small, who would hack us?
Scope of service
The service is designed for companies that want reliable cybersecurity and information protection and to reduce the risk of incidents, data loss and financial losses, unauthorized access, and gaps in information security controls. We protect small and medium-sized businesses from malware, phishing and unauthorised access, and for critical infrastructure companies and the other NIS2 sectors we provide cybersecurity services with clear technical measures and one point of contact.

Endpoint protection
Antivirus protection, periodic vulnerability scans and group security policies are included in all plans. We deploy and maintain EDR and SIEM for clients on the Professional plan (included) and Standard (for an extra fee): protection of computers, laptops and servers against malware, ransomware and unauthorized access. We monitor the protection status and respond to alerts. The goal is to stop malicious software before it spreads across the network.
- EDR on computers, laptops and servers
- Antivirus and anti-malware protection
- Central management of protection and updates
- Visibility of each device's status

24/7 system monitoring
We watch the health of computers and servers: availability, anomalies, disk space, bad sectors and other metrics, so we catch a problem before it stops the business. Monitoring is included in all plans.
- Availability and state of machines
- Disk space and bad sectors
- Anomalies and key metrics
- Alerts and response according to the plan

Threat detection (SIEM)
We collect and analyze logs of key systems to detect suspicious activity. SIEM is included in the Professional plan and is an extra on Standard.
- Log collection and analysis (SIEM)
- Alerts on unusual activity
- Fast response according to the agreed plan

Backups and updates
We set up a suitable backup and check that data can be restored (backup policies are included in the Standard and Professional plans). We keep operating systems and software updated so that no known vulnerabilities stay open.
- Backups of servers and key data
- Restore testing
- Patch management
- Detection of outdated software

Network protection and access
We protect the company network and control who has access to what. Local network support is included in the Standard and Professional plans. VPN for secure remote access is included in Professional and is an extra on Standard. We work with the client's existing equipment and, where the budget allows, recommend a UTM device with IPS for fuller protection. More in managing corporate network security.
- Network protection using the client's existing equipment
- VPN for secure remote access
- Access review and restriction
- Separation of critical systems in the network

Technical security review
We carry out a technical security audit: we review devices, network, access and backups and find technical weaknesses: missing protection, outdated software, unnecessary access. Periodic vulnerability scans are included in all plans. You get a list of prioritized technical improvements.
- Review of devices and operating systems
- Detection of missing updates and outdated software
- Review of access and accounts
- List of prioritized technical improvements

NIS2 technical measures - one package, one contact
"NIS2 technical measures" is our package for companies that fall under NIS2 and the Bulgarian Cybersecurity Act. We implement and maintain the technical measures, while the policies, the risk assessment and the compliance documentation are prepared by our partner consultant - you have a single point of contact: us. The package is included in the Professional plan, can be added to the Standard plan for an extra fee, and is not offered in the Remote plan. Submitting notifications and reports to the authority remains the company's responsibility; we prepare the technical information for them. NIS2 does not cover only critical infrastructure: many medium-sized and large companies in manufacturing, transport, supply and digital services fall under it too. That is why the first step is to check whether your company is in scope - our partner consultant makes this assessment. See also IT support for regulated companies.
- EDR on computers and servers
- SIEM - log collection and analysis
- Backups with restore testing
- Patch management
- Network protection on your existing equipment (IPS - with a UTM)
- MFA and access control
- 24/7 monitoring
- Inventory and documentation of the technical environment
- Incident response

ISO 27001: technical preparation and documentation with a partner
We prepare the technical side of the infrastructure for ISO 27001 for clients on the Professional plan (included) and Standard (for an extra fee) and assist with the technical part of an audit. The policies, documentation and risk assessment are prepared by our partner consultant, and we coordinate the work. The certificate is issued by an accredited body. We are going through the same process ourselves: we are implementing an information security management system under ISO/IEC 27001 and expect certification by the end of 2026.
- Review of technical controls
- Deployment of technical measures (protection, backups, updates, access)
- Assistance with the technical part of an audit

GDPR: technical measures and documentation with a partner
We implement the technical side of personal data protection: disk encryption, access control, backups and restricting access to sensitive information. The GDPR documentation, policies and risk assessment are prepared by our partner consultant, and we are your single point of contact.
- Disk and device encryption
- Access control and restriction for sensitive data
- Backups and secure storage
- Review of the technical measures that protect data

Incident response: what we do in the first hours
If a computer is infected, a mailbox is compromised or files are encrypted by ransomware, every minute counts. Monitoring runs 24/7 in every plan, and when an alert comes in we follow a clear order. We respond within 1 hour on the Professional plan, within 2 hours on Standard and within 8 hours on Remote.
- We isolate the affected device or account so the attack does not spread across the network
- We stop the outside access: change passwords, end active sessions and check two-factor sign-in
- We check the backups and restore the data from the last clean copy
- We find how the attack got in and close the entry point
- We prepare the technical information about the incident - under NIS2 it is needed for the early warning within 24 hours and the notification within 72 hours, which the company submits to the authority
If you have an incident right now, call us on +359 2 489 68 32.

Security by plan
24/7 monitoring, antivirus, regular vulnerability scans and security group policies are included in every plan. The plans differ in the additional measures:
- Remote: 24/7 monitoring, antivirus, vulnerability scans and group policies
- Standard: everything in Remote plus backups - EDR, SIEM, VPN and the NIS2 measures at extra cost
- Professional: everything in Standard plus EDR and SIEM, VPN, the "NIS2 technical measures" package and technical preparation for ISO 27001, all included
The documentation, policies and risk assessment for NIS2, ISO 27001 and GDPR are prepared by our partner consultant. You have one contact - us.

Example price for cybersecurity
A company with 10 computers and one file server on the Professional plan pays €450 per month excluding VAT. This includes EDR and SIEM licences, VPN, backups, 24/7 monitoring and the NIS2 technical measures. On the Standard plan the same company pays €350 per month excluding VAT, and EDR, SIEM and the NIS2 measures are added at extra cost after a review of the environment. Paid separately:
- Microsoft 365 and Windows Server licences
- A UTM device for network protection, if you decide to buy one
- The documentation from the partner consultant
Let's talk about your needs - we will review your setup before we propose a solution and a price.
How do we work on information security?
Technical review of the environment
We review devices, network, access and current measures.
Priorities
We decide which technical weaknesses are most dangerous for the business and what is addressed first.
Plan of technical measures
We prepare a practical plan of what is implemented and in what order.
Implementation and setup
We deploy device protection, monitoring, backups, updates and access control.
Monitoring and support
We watch the environment continuously and keep the measures up to date.
When does a business need stronger information security?
If you recognize any of the following problems, it is probably time for a more structured approach to technical security.
You have no clear view of which devices are protected and which are not
There are concerns about ransomware, phishing, or unauthorized access
You have no working, tested backups
Some computers and servers run outdated software with no updates
You are not sure how the IT environment would withstand an incident or breach
Your IT environment must meet the technical requirements of NIS2 or ISO 27001
Why companies choose Helpdesk Bulgaria
Companies choose Helpdesk Bulgaria when they want technical measures implemented and maintained by the team that looks after their IT every day, rather than recommendations on paper.
Let's talkWe implement and maintain the measures, not just recommend them
One team for support, security and infrastructure
24/7 monitoring and response according to an agreed service level (SLA)
NIS2 and ISO 27001 with one point of contact: technical measures from us, documentation from a partner
Frequently Asked Questions
Call usCybersecurity for a business means protecting computers, servers, the network and data from attacks, theft and loss. In practice it is a set of technical measures - device protection (antivirus or EDR), updates, backups, access control and 24/7 monitoring - plus clear rules for employees. We implement and maintain the technical measures, and for NIS2 and ISO 27001 our partner consultant prepares the documentation.
We start with a conversation about your needs. We review your environment - computers, servers, network, backups and access - as soon as you wish, before proposing a solution. Within 1 working day of the review we send you a plan and a price, and once you approve, we start straight away: we document the environment, switch on monitoring, take over access and make the first improvements.
Basic protection is part of our subscription support: all plans include antivirus licenses and 24/7 monitoring, from EUR 20 per computer per month excl. VAT. Additional measures - EDR, SIEM, a firewall or the technical measures for NIS2 - are priced after a review of your environment.
Yes. Remote support (monitoring, phone help and remote access) covers all of Bulgaria. We visit clients on site in Sofia, and outside Sofia by arrangement for an extra travel fee. We work with businesses only.
Yes. We implement the technical measures: disk encryption, access control, backups and restricting access to sensitive data. The GDPR documentation, policies and risk assessment are prepared by our partner consultant, and we are your single point of contact.
Yes, with our "NIS2 technical measures" package. We implement the technical measures: EDR, SIEM, backups, patch management and network protection (included in the Professional plan, an extra on Standard, not offered on Remote). The scope assessment, policies, documentation and risk assessment are prepared by our partner consultant, and we are your single point of contact. Reporting to the authority remains the responsibility of management.
Yes. We prepare the technical part (included in the Professional plan, for an extra fee on Standard): we bring the IT infrastructure in line with the technical requirements and assist during the audit. Policies, documentation and the risk assessment are prepared by our partner consultant, and we are your single point of contact. The certificate is issued by an accredited body.
Yes. We work with companies that have no IT team and with those that have their own IT but need extra technical capacity. The service is part of our subscription IT support - if you are not a client yet, we start with a conversation about your needs and a suitable plan.
Yes. Antivirus protection is included in all plans, while EDR is included in Professional and is an extra on Standard. We also maintain update policies according to the needs of the business.
It is a review of devices, network, access and backups that finds technical weaknesses and missing measures. The result is a list of prioritized technical improvements.
24/7 system monitoring, antivirus protection, periodic vulnerability scans and group security policies (in all plans), EDR and SIEM (included in Professional, an extra on Standard), backups (Standard and Professional), patch management, network protection and a technical security review. We offer technical compliance with NIS2 and ISO 27001 on Professional (included) and Standard (for an extra fee), and the documentation is prepared by our partner consultant.
Yes. We take on technical protection as part of the subscription: antivirus, updates and periodic vulnerability checks are in every plan, while EDR and SIEM are included in the Professional plan and available at extra cost in Standard. We monitor your systems 24/7 and respond to incidents. For NIS2 and ISO 27001 documentation we work with a partner consultant, and you have a single point of contact - us. Let's talk about your needs - we will review your environment before proposing a solution and price.
We isolate the affected computers, stop the outside access, restore the data from the last clean backup and close the entry point. If the company is in scope of NIS2, we prepare the technical information for the notification to the authority. That is why our backups are checked with a restore test - a backup that cannot be restored does not protect you.
Monitoring runs 24/7 in every plan. We respond within 1 hour on the Professional plan, within 2 hours on Standard and within 8 hours on Remote. In practice we pick up most requests almost immediately.
On the Professional plan - €450 per month excluding VAT, including EDR and SIEM licences, VPN, backups, 24/7 monitoring and the NIS2 technical measures. On the Standard plan - €350 per month excluding VAT, with EDR, SIEM and the NIS2 measures added at extra cost. We confirm the exact amount after a short review of your environment.
Antivirus stops known threats. EDR watches how the computer behaves and also stops new attacks, such as ransomware that is not yet in the antivirus databases. For companies with sensitive data or in scope of NIS2 we recommend EDR. We explain the difference in the article EDR vs traditional antivirus.
Let us improve the technical security of your IT environment
Briefly describe the number of computers and servers, critical systems and main concerns, and we will propose technical measures and next steps.




