Cybersecurity and information security for businesses

Antivirus protection, periodic vulnerability scans and group security policies are included in all plans. We deploy and maintain EDR and SIEM for clients on the Professional plan (included) and Standard (for an extra fee): protection of computers, laptops and servers against malware, ransomware and unauthorized access. We monitor the protection status and respond to alerts. The goal is to stop malicious software before it spreads across the network.

We watch the health of computers and servers: availability, anomalies, disk space, bad sectors and other metrics, so we catch a problem before it stops the business. Monitoring is included in all plans.

We collect and analyze logs of key systems to detect suspicious activity. SIEM is included in the Professional plan and is an extra on Standard.

We set up a suitable backup and check that data can be restored (backup policies are included in the Standard and Professional plans). We keep operating systems and software updated so that no known vulnerabilities stay open.

We protect the company network and control who has access to what. Local network support is included in the Standard and Professional plans. VPN for secure remote access is included in Professional and is an extra on Standard. We work with the client's existing equipment and, where the budget allows, recommend a UTM device with IPS for fuller protection.

We carry out a technical security audit: we review devices, network, access and backups and find technical weaknesses: missing protection, outdated software, unnecessary access. Periodic vulnerability scans are included in all plans. You get a list of prioritized technical improvements.

"NIS2 technical measures" is our package for companies that fall under NIS2 and the Bulgarian Cybersecurity Act. We implement and maintain the technical measures, while the policies, the risk assessment and the compliance documentation are prepared by our partner consultant - you have a single point of contact: us. The package is included in the Professional plan, can be added to the Standard plan for an extra fee, and is not offered in the Remote plan. Submitting notifications and reports to the authority remains the company's responsibility; we prepare the technical information for them. NIS2 does not cover only critical infrastructure: many medium-sized and large companies in manufacturing, transport, supply and digital services fall under it too. That is why the first step is to check whether your company is in scope - our partner consultant makes this assessment.

We prepare the technical side of the infrastructure for ISO 27001 for clients on the Professional plan (included) and Standard (for an extra fee) and assist with the technical part of an audit. The policies, documentation and risk assessment are prepared by our partner consultant, and we coordinate the work. The certificate is issued by an accredited body.

We implement the technical side of personal data protection: disk encryption, access control, backups and restricting access to sensitive information. The GDPR documentation, policies and risk assessment are prepared by our partner consultant, and we are your single point of contact.