For business For individuals For public sector For partners
Call an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский Қазақша English
Sign in
Services
Solutions
Pricing
Cases
Training
Company
Contacts
Русский Қазақша English
All services
Basic Up to 15 seats, weekday support from 9 to 18 Standard Up to 50 seats, round the clock, servers included Premium Named engineers, response within fifteen minutes Project One task, price agreed in advance Free IT audit Five days of review and a written report
IT outsourcing and support Tickets, on-site visits and a duty line all week Support levels and SLA Response time written into the contract System administration Windows and Linux, domain, virtual machines IT infrastructure Starter setup, survey, virtual desktops Networks and telecom Cabling, diagrams, testing and supervision Low-voltage systems Cameras and access control Cloud services and hostingNew Virtual servers, 1C platforms, file storage Backup Copies, off-site storage, recovery procedure
Regulatory requirements Personal data, paperwork and technical measures System and data protection Network, software, databases and a filter in front of the site Monitoring and control Duty monitoring, vulnerability scanning, antivirus Security tools Selecting and rolling out security tools, private channels
Websites and web development From a couple of pages to a wholesale platform E-commerce and integrations Accounting sync, payments, delivery, marketplaces Bitrix24 and portals Portal, deal pipeline and licences Custom development Software built for the task and mobile apps Testing and QA Scenarios, load testing and automated checks
Artificial intelligenceNew Use cases, rollout plan and staff training Data and analytics Clean reference data, dashboards, scan recognition Consulting and audit Strategy, system and architecture assessment Marketing Channel review, deal stages, consulting
Workplaces Desktops, laptops, peripherals and consumables Servers and networks Servers, storage, switches and power supply Retail equipment Cash registers, marking codes, scanners and scales Software Antivirus, developer and admin tooling Training For a company, for a group and one to one
Not sure where to start? We review your infrastructure free of charge in five days Request an audit
All solutions
Data localisation Moving systems and data to a site inside the country Personal data protection Paperwork and safeguards before an inspection arrives Office relocation Network, servers and staff workplaces at the new address Opening a branch One equipment standard and a link to head office Remote work Virtual desktops, access to accounting, private channels Downtime protection Backups, monitoring and an incident procedure
Retail and e-commerce Registers, codes, store and one stock across channels Manufacturing Shop-floor network, servers and production accounting Healthcare Patient data and uninterrupted operation Construction Links to sites, workplaces and design software Logistics Warehouse, data collection terminals and data exchange Public sector Registered software, portals and protection requirements
Small business Up to 15 seats, simple support without servers Medium business Servers, network and round-the-clock duty Large business A dedicated team, firm deadlines, reporting Branch network The same IT at every location
Didn't find your scenario? Describe the task and we will put a solution together Send a request
About us Who we are and how the work is organised Special offers What we offer right now and on what terms For partners Terms of cooperation and commission Payment Invoice, card and closing documents Contacts How to call, write and get to us
Услуга · Information security

Infrastructure protection

The task is to ensure that getting into one machine does not open access to everything else. A network with no zoning, where the accountant computer sees the servers directly, explains most of the stories about ransomware taking a company overnight.

Send a request What is included
Zones
instead of the shared network
Boundary
ingress and egress under rules
Remote work
through a secure tunnel
Events
we collect and review

What the work includes

We move from the outside in: first the network boundary, then internal segmentation, then the workstations.

Discuss the scope

The network boundary

Rules on egress and ingress: what is allowed out, what is allowed in and with which addresses.

Zoning

Servers, workstations, the guest network, cameras and equipment each in their own zone, with only what is permitted between them.

Remote access

A secure connection with login confirmation instead of a port open to the internet.

Servers

Current updates, disabling unnecessary services, restricting administrative logon.

Workstations

Antivirus, restricting which programs can run, removing local administrator rights.

Monitoring

Event collection and alerting on unusual activity.

How it goes

We start with a survey, and almost always find access that was long forgotten, and open to the outside at that.

01

Survey

A network diagram, open ports, a list of remote entry points. Often this is the first such document the company has had.

02

Urgent

We close ports exposed to the outside, change factory passwords and disable what is not used.

03

Zones

We separate things into segments and write the rules. It is done in stages so as not to stop the work.

04

Testing

We scan from outside and inside and write the result up as a report.

Factory passwords on cameras, printers and switches outlive everything else. Workstations are remembered, network hardware is forgotten, and it stands for years with the password from the manual. Meanwhile a switch sees the whole network, and a camera can become a way in from outside.

Questions and answers

What you have open to the internet. A list of external addresses and ports is compiled in an hour and almost always contains a couple of items that must be closed immediately. After that you can plan calmly.

In a small company no: the tasks are covered by the system administrator with outside support. A dedicated role appears when there are regulatory requirements or the infrastructure has grown past a hundred servers.

By rescanning and comparing with the first report. The improvement must be measurable: there were this many open ports and shared accounts, now there are this many. Impressions are a poor criterion here.

More in this area

Open the area
Service Personal data security Access, logging and encryption of information about people Service Organisational and administrative documentation A set of papers that will stand up to an inspection Service Supply and rollout of security products A pilot, supply and rollout against the requirements Service Application protection Roles in the live systems and integration accounts

We will test the infrastructure defences

We will look at what is exposed and how the network is built inside, and hand over a list of what to close first.