For business For individuals For public sector For partners
Call an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский Қазақша English
Sign in
Services
Solutions
Pricing
Cases
Training
Company
Contacts
Русский Қазақша English
All services
Basic Up to 15 seats, weekday support from 9 to 18 Standard Up to 50 seats, round the clock, servers included Premium Named engineers, response within fifteen minutes Project One task, price agreed in advance Free IT audit Five days of review and a written report
IT outsourcing and support Tickets, on-site visits and a duty line all week Support levels and SLA Response time written into the contract System administration Windows and Linux, domain, virtual machines IT infrastructure Starter setup, survey, virtual desktops Networks and telecom Cabling, diagrams, testing and supervision Low-voltage systems Cameras and access control Cloud services and hostingNew Virtual servers, 1C platforms, file storage Backup Copies, off-site storage, recovery procedure
Regulatory requirements Personal data, paperwork and technical measures System and data protection Network, software, databases and a filter in front of the site Monitoring and control Duty monitoring, vulnerability scanning, antivirus Security tools Selecting and rolling out security tools, private channels
Websites and web development From a couple of pages to a wholesale platform E-commerce and integrations Accounting sync, payments, delivery, marketplaces Bitrix24 and portals Portal, deal pipeline and licences Custom development Software built for the task and mobile apps Testing and QA Scenarios, load testing and automated checks
Artificial intelligenceNew Use cases, rollout plan and staff training Data and analytics Clean reference data, dashboards, scan recognition Consulting and audit Strategy, system and architecture assessment Marketing Channel review, deal stages, consulting
Workplaces Desktops, laptops, peripherals and consumables Servers and networks Servers, storage, switches and power supply Retail equipment Cash registers, marking codes, scanners and scales Software Antivirus, developer and admin tooling Training For a company, for a group and one to one
Not sure where to start? We review your infrastructure free of charge in five days Request an audit
All solutions
Data localisation Moving systems and data to a site inside the country Personal data protection Paperwork and safeguards before an inspection arrives Office relocation Network, servers and staff workplaces at the new address Opening a branch One equipment standard and a link to head office Remote work Virtual desktops, access to accounting, private channels Downtime protection Backups, monitoring and an incident procedure
Retail and e-commerce Registers, codes, store and one stock across channels Manufacturing Shop-floor network, servers and production accounting Healthcare Patient data and uninterrupted operation Construction Links to sites, workplaces and design software Logistics Warehouse, data collection terminals and data exchange Public sector Registered software, portals and protection requirements
Small business Up to 15 seats, simple support without servers Medium business Servers, network and round-the-clock duty Large business A dedicated team, firm deadlines, reporting Branch network The same IT at every location
Didn't find your scenario? Describe the task and we will put a solution together Send a request
About us Who we are and how the work is organised Special offers What we offer right now and on what terms For partners Terms of cooperation and commission Payment Invoice, card and closing documents Contacts How to call, write and get to us
Услуга · Тестирование и QA

Security testing

We find the weak points before those looking for them from outside with bad intentions. We work strictly to agreed rules, in an agreed window and without destructive actions. This is a controlled test, not a break-in.

Send a request What is included
Permission
in writing and in advance
Carefully
without destructive actions
Priorities
what to fix first
Re-testing
after your fixes

What the work includes

We look at what gets attacked most: the login mechanism, permissions, input handling and third-party components.

Discuss the scope

Authentication

Bypassing the login, weak passwords, insecure password recovery, session lifetime.

Permission separation

Whether a user can get someone else's data by substituting a different identifier. The most common finding.

Input handling

Injection into database queries, script execution in the browser, uploading dangerous files.

Components

Third-party libraries with publicly known vulnerabilities. A modern project has dozens of them.

The environment

Exposed admin URLs, debug mode left on, unnecessary headers, accessible archives and backups.

Отчёт

Findings with a severity rating, the steps to reproduce and recommendations for fixing them.

How it goes

A typical web application is tested in one or two weeks including preparing the report.

01

The agreement

Written permission, the scope, the testing window, contacts for urgent communication.

02

Reconnaissance

We gather information about the application: entry points, the technologies used, exposed interfaces.

03

Проверка

By hand and with tools, in a gentle mode, without actions that could disrupt operations.

04

Отчёт

The findings in priority order, and after your fixes a re-test of what was closed.

A list of vulnerabilities is a document you cannot email to just anyone. It describes in detail how to reproduce every finding, and until they are fixed it is more dangerous than the vulnerabilities themselves. We hand it over securely and to a limited circle.

Questions and answers

It is lawful with the written permission of the system's owner. We work strictly under contract, with defined boundaries and timing. Testing someone else's systems without permission is not allowed and we do not do it.

We work carefully and without destructive tests. Even so, any such work carries risk, so a test copy is preferable, and on a live system an agreed window with a fresh backup ready.

A scanner checks against a database of known signatures and is good at finding outdated components. Logic flaws - access to other people's data, bypassing rules, wrongly granted permissions - are seen only by a person. Proper work combines both approaches.

More in this area

Open the area
Service Functional testing Testing the working scenarios before release Service Load testing Поведение системы под пиковым трафиком Service Test automation Automated tests for regular checks Service UI/UX testing Testing interface usability with real users

We will look for holes in the application

Describe the application and say whether there is a test copy. We will agree the boundaries and run the test.