For business For individuals For public sector For partners
Call an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский Қазақша English
Sign in
Services
Solutions
Pricing
Cases
Training
Company
Contacts
Русский Қазақша English
All services
Basic Up to 15 seats, weekday support from 9 to 18 Standard Up to 50 seats, round the clock, servers included Premium Named engineers, response within fifteen minutes Project One task, price agreed in advance Free IT audit Five days of review and a written report
IT outsourcing and support Tickets, on-site visits and a duty line all week Support levels and SLA Response time written into the contract System administration Windows and Linux, domain, virtual machines IT infrastructure Starter setup, survey, virtual desktops Networks and telecom Cabling, diagrams, testing and supervision Low-voltage systems Cameras and access control Cloud services and hostingNew Virtual servers, 1C platforms, file storage Backup Copies, off-site storage, recovery procedure
Regulatory requirements Personal data, paperwork and technical measures System and data protection Network, software, databases and a filter in front of the site Monitoring and control Duty monitoring, vulnerability scanning, antivirus Security tools Selecting and rolling out security tools, private channels
Websites and web development From a couple of pages to a wholesale platform E-commerce and integrations Accounting sync, payments, delivery, marketplaces Bitrix24 and portals Portal, deal pipeline and licences Custom development Software built for the task and mobile apps Testing and QA Scenarios, load testing and automated checks
Artificial intelligenceNew Use cases, rollout plan and staff training Data and analytics Clean reference data, dashboards, scan recognition Consulting and audit Strategy, system and architecture assessment Marketing Channel review, deal stages, consulting
Workplaces Desktops, laptops, peripherals and consumables Servers and networks Servers, storage, switches and power supply Retail equipment Cash registers, marking codes, scanners and scales Software Antivirus, developer and admin tooling Training For a company, for a group and one to one
Not sure where to start? We review your infrastructure free of charge in five days Request an audit
All solutions
Data localisation Moving systems and data to a site inside the country Personal data protection Paperwork and safeguards before an inspection arrives Office relocation Network, servers and staff workplaces at the new address Opening a branch One equipment standard and a link to head office Remote work Virtual desktops, access to accounting, private channels Downtime protection Backups, monitoring and an incident procedure
Retail and e-commerce Registers, codes, store and one stock across channels Manufacturing Shop-floor network, servers and production accounting Healthcare Patient data and uninterrupted operation Construction Links to sites, workplaces and design software Logistics Warehouse, data collection terminals and data exchange Public sector Registered software, portals and protection requirements
Small business Up to 15 seats, simple support without servers Medium business Servers, network and round-the-clock duty Large business A dedicated team, firm deadlines, reporting Branch network The same IT at every location
Didn't find your scenario? Describe the task and we will put a solution together Send a request
About us Who we are and how the work is organised Special offers What we offer right now and on what terms For partners Terms of cooperation and commission Payment Invoice, card and closing documents Contacts How to call, write and get to us
Услуга · Information security

WAF web application protection

A site is open to the whole internet round the clock, and automated scanners find it within hours of publication. A request filter cuts off common attacks on the approach, keeping them away from the application code.

Send a request What is included
Round the clock
request filtering
Automation
bots cut off
Patches
by a rule until it is fixed
Reports
what and from where

What the work includes

A filter does not replace careful development but buys time: we close a hole with a rule today and fix it in the code in the next release.

Discuss the scope

Filtering

Cutting off common attacks: injection into database queries, substituting scripts on a page, attempts to escape the directory.

Password guessing

Limiting login attempts, protecting the sign-in and account recovery forms.

Bots

We separate search engine crawlers from scrapers and malicious automation.

Quick patches

The vulnerability is closed by a rule before the developers release a fix.

Forms

Filtering out automated submissions without losing genuine enquiries.

Reports

What was blocked, where it came from and under which rule.

How it goes

Connecting takes a few days, but tuning the rules to a specific site stretches out longer than the installation itself.

01

Site review

What the application is, which forms it has, whether there is sign-in, user accounts and integrations.

02

Monitoring

The filter runs without blocking and builds a picture of the real traffic.

03

Rules

We clear out the false positives, of which a live site always has plenty.

04

Blocking mode

We enable blocking and set up alerts and a regular review.

A new site starts being scanned within hours of appearing in the index. There is no need to wait for a targeted attack: bots run through admin panel addresses and known platform vulnerabilities round the clock and indiscriminately. That is why the filter goes up at launch, not after the first incident.

Questions and answers

The cloud option is simpler and usually cheaper, and it speeds delivery through a distributed network. Your own is needed when requirements forbid passing traffic through an external service, or the site is not reachable from the internet at all.

Work through them during the first month and adjust the rules. Getting rid of them entirely is impossible, but bringing them down to isolated cases is quite realistic. That is exactly why the monitoring phase is never skipped.

No. A filter buys time, not immunity: it closes known attack patterns but does not see logic errors in your business rules. Updates will still have to be installed.

More in this area

Open the area
Service Personal data security Access, logging and encryption of information about people Service Organisational and administrative documentation A set of papers that will stand up to an inspection Service Supply and rollout of security products A pilot, supply and rollout against the requirements Service Infrastructure protection The network boundary, zones and remote connections

We will protect your site

Describe the application and state the platform. We will pick a suitable filter and tune the rules to your traffic.