Cybersecurity, heuristics and proactive data protection

Classic antivirus protection recognises threats by their “signature” – only if it already knows them. Modern attacks change constantly. Heuristics and behavioural analysis look at what a program or a user is doing and react to suspicious behaviour, even when the threat is completely new.

Heuristics and proactive protection

• EDR/XDR – real-time monitoring of endpoints (computers, servers), anomaly detection and automatic isolation of an infected device.
• SIEM and central logs – collecting events from servers, the network, the cloud and applications in one place, with correlation and alerts.
• Network protection – next-generation firewalls, intrusion detection and prevention systems (IDS/IPS), DNS filtering.
• Email protection – filtering phishing and malicious attachments, SPF, DKIM and DMARC against spoofing of your domain.
• Web application protection – WAF, bot limiting, protection against brute force and DDoS.
• Our SASS technology – Security Advisor System Stinger for proactive security analysis.

Security and data protection

Ransomware-proof backups

Immutable backups that an attacker cannot encrypt or delete, stored outside the main network, with regularly tested restores.

Encryption

Encryption of laptop drives, databases and connections, and key management.

Access management

The principle of least privilege, two-factor authentication, a password manager for the team and regular reviews of access rights.

Vulnerability management

Regular scanning, prioritisation and planned application of updates.

Tests and assessments

• risk and security maturity assessment;
• penetration tests of web applications, networks and Wi-Fi;
• simulated phishing campaigns;
• configuration reviews of cloud services (Microsoft 365, Google Workspace).

People are the first line of defence

Many successful attacks start with an email someone clicked on. We run short, practical training for employees – how to recognise phishing, how to keep passwords safe and what to do when something looks suspicious – with examples from real attacks.

NIS2 and the Cybersecurity Act

The NIS2 Directive extends the range of organisations with cybersecurity obligations – including medium-sized and large companies in energy, transport, healthcare, manufacturing, digital services and other sectors. We help assess whether you are in scope, analyse the gaps, implement the technical measures, prepare the incident response plan and the documentation, in cooperation with your lawyer.

Incident response

If you suspect you are under attack – contact us immediately. We isolate the affected systems, limit the damage, restore from backup, analyse how it happened and help with notifying the competent authorities within the legal deadline.