Protection for data, devices and accounts
Many attacks on small and midsize businesses start with a fake email, a weak password or a security gap that an available update would have closed long ago. We close these entry points one by one and make sure you can get back to work quickly after an incident.
Cybersecurity keeps outsiders from reaching your data, encrypting your systems or sending invoices and payment orders in your name. If an attack still gets through, your preparation decides whether you lose one day or several weeks.
This rarely takes expensive specialist products. What matters more is that the basics are fully in place and checked regularly: a properly configured firewall, sign-in with a second factor, up-to-date systems, a backup you can actually restore, and employees who recognise a suspicious email. That is where we start.
An attacker has to get past every layer to reach your data. We secure them from the outside in.
The firewall at your internet connection only lets through the connections your business really needs. Inside the network we separate areas such as office, production, servers and guest Wi-Fi, so an attacker cannot move from one device to everything else. We connect sites and staff on the road through secured VPN. We work with firewalls from Sophos, Fortinet (FortiGate) and Securepoint.
Spoofed senders, malicious attachments and links to fake sign-in pages are filtered out before they reach the inbox.
Many attacks target the people in your company. Using everyday examples, we show your team how to spot fraud attempts and what to do when in doubt.
Every sign-in to Microsoft 365 and your systems uses MFA. With Conditional Access we define which devices and locations are allowed, so a stolen password alone is not enough.
Operating systems and applications get their security updates promptly and in an orderly way. We monitor which devices fall behind and bring them up to date before a known gap is exploited.
We manage laptops and smartphones centrally through Intune and protect them with Defender. If a device is lost, it can be locked remotely and your company data stays protected.
We back up your data and run test restores regularly. The results are documented, so before an emergency you know that recovery works and how long it takes.
Every measure starts with a review of where you stand, so you invest first where the risk is highest.
In twenty minutes over Teams or by phone, we find out where you stand and which review fits your size.
The security check takes 2 to 3 days and ends with a written report. For larger environments there is the Security Assessment, which adds a permissions analysis and a NIS2 gap analysis.
We rank the findings by risk and effort and tell you what implementation will cost.
We carry out the measures as a project or as part of our Managed IT service and check regularly that they still work.
Who in your company can access what is one of the most important security questions there is. In environments that have grown over time, former employees often still have access, and new colleagues inherit the rights of their predecessor along with everything that came with them.
That is why we have a separate service for it: Identity & Access Management. There we analyse permissions, develop a role model and set up defined processes for joiners and leavers.
An incident response plan sets out who decides in an emergency, whom you call and which systems must come back first. We draw it up with you and practise it, so it is more than just a file. If your company falls under NIS2, a significant security incident must be reported within 24 hours. If personal data is affected, the GDPR (DSGVO) requires notification to the data protection authority within 72 hours.
| Security check | €2,490 |
| Security Assessment | from €6,900 |
| Identity & Access and cybersecurity | €140 / h |
| Managed IT Standard with MFA, Conditional Access and Defender | €99 per user / month |
The cost of the assessment is credited towards a follow-up project. All prices are net, excl. VAT at the statutory rate.
We took over the complete IT of a small research company operating internationally, realigned it and continue to develop it in close coordination with management.
Result: A fully automated IT environment designed for security and NIS2 requirements, with separate admin and user accounts and secured VPN between the sites.
Two businesses were merged onto one shared IT without interrupting day-to-day operations: Microsoft 365 fully in the cloud, sign-in with MFA and Conditional Access, device management through Intune and Autopilot.
Result: New employees are now ready to start in less than a day instead of three to four days. A new device is ready for use in two hours, and it is clear which software is running and which licences are being paid for.
FAQ
With a review of where you stand, because without one it is easy to invest in the wrong place. Our security check costs €2,490 and gives you a written report showing which measures should come first.
No, they only cover part of it. Many attacks come through stolen credentials or fake emails, so MFA, email protection, current updates and a tested backup belong in the picture too.
Yes. We set up the firewall, VPN and network segmentation, maintain rules and updates and check regularly which access points are open from the outside. We work with firewalls from Sophos, Fortinet (FortiGate) and Securepoint. With an existing firewall, we first check whether the manufacturer still provides security updates for it. Ongoing management of servers and network is included in the Complete package.
MFA prevents a stolen password alone from being enough to sign in. In addition to the password you need a second proof, usually a confirmation in an app on your smartphone.
Only by running a test restore. We restore backups regularly and document the results, so you know how long a recovery takes.
The basics are. Even the Basic package includes patch management and backup with tested recovery, and the Standard package adds MFA, Conditional Access and Defender.
Yes. Using everyday examples, we show your team how to recognise fake emails and calls and whom to contact when in doubt.
Disconnect affected devices from the network, do not delete anything and call us. Our IT Emergency page lists the first steps and the ways to reach us.
That depends on your sector, your size and your turnover, and in the end it is a legal question. We work out with you what needs to be done technically, even if the requirements only reach you through a customer in the supply chain.
Cybersecurity
Give us a short description of your environment. Afterwards you will know which starting point makes sense for you.
