Security audit
We assess devices, access, the network, backups and processes, and measure vulnerabilities. You receive a prioritised report whether or not we work together afterwards.
Cybersecurity
Antivirus is one layer. Security is a system: protected devices, identities with MFA, the network, backups, vulnerability management and a person who responds to alerts. We manage all the layers and report in a way that satisfies an auditor.
Built for ISO 27001NIS2 DORA
- Device protection (EDR / XDR)
- Identities and access
- Network and Cloudflare
Security as a system, not as an antivirus
- 3 EDR / XDR platforms matched to company size
- MFA for all access, with conditional access
- Monthly vulnerability scanning with a report
- 24/7 alert monitoring and response
Most incidents in companies start not with a sophisticated break-in but with simple things: a phishing e-mail, a reused password without MFA, an unpatched server, or backups sitting on the same network as the encrypted files. Antivirus does not close these gaps, because they are not on the device but in processes.
We provide cybersecurity as a managed service: we select and maintain EDR / XDR protection (Bitdefender GravityZone, SentinelOne, CrowdStrike), turn on MFA and conditional access, protect websites and internal systems through Cloudflare, scan for vulnerabilities every month, keep backups in isolated storage and respond to alerts 24/7. Everything is documented, so for an ISO 27001, NIS2 or DORA audit you provide the evidence from one place.
The security layers we manage
Device protection (EDR / XDR)
Bitdefender GravityZone, SentinelOne or CrowdStrike for computers, servers and mobile devices: prevention, detection and automated response.
Learn more 
Identities and access
MFA for everyone, Microsoft Entra ID conditional access, legacy protocols disabled, access reviews, and accounts of departing employees disabled the same day.
Learn more 
Network and Cloudflare
Firewalls, segmentation, VPN with 2FA, and for websites and internal systems, Cloudflare WAF, DDoS protection and Zero Trust access with no open ports.
Learn more 
Vulnerability management
Every month we scan servers, workstations and websites, set priorities and install patches in agreed windows, with a report for your audit.
Learn more 
Backups and recovery
Backups in isolated storage, immutable backups against ransomware, and PlanB: recovery of the whole infrastructure in our cloud.
Learn more 
Incident management and reports
Alerts reach us 24/7, incidents are handled under a documented procedure, and every month you receive a report: what was stopped, what was patched, what we recommend.
Learn more Endpoint protection platforms and pricing
Bitdefender GravityZone
- Protection against exploits
- EDR and XDR integration
- Threat and anomaly analysis and visualisation
- Automatic disinfection and removal
From
4.39
SentinelOne Singularity
- Autonomous threat detection and response
- File rollback after an attack
- EDR and XDR in one platform
- Works without a constant cloud connection
From
6.19
CrowdStrike Falcon
- AI-driven threat prevention
- EDR and XDR backed by a global threat intelligence network
- Threat hunting and security analytics 24/7
- Fast, lightweight deployment with no infrastructure
From
8.59
How we choose an EDR platform
All three are world-class; they differ in what they suit best.
| Bitdefender GravityZone | SentinelOne Singularity | CrowdStrike Falcon | |
|---|---|---|---|
Who we usually recommend it to | 10 to 150 workstations, servers, ERP systems | companies that value autonomous response and recovery | larger and regulated companies |
Strength | prevention, price and simple management | autonomous detection, file rollback, works offline | threat intelligence, 24/7 threat hunting and analytics |
Included in | managed CLOUD servers and managed IT services | by choice | by choice |
Management | in the MDP CLOUD console | in the MDP CLOUD console | in the MDP CLOUD console |
Compliance | ISO 27001, NIS2 | ISO 27001, NIS2, DORA | ISO 27001, NIS2, DORA |
How we start
The first result, critical gaps closed, within two weeks.
Critical measures
In the first two weeks we turn on MFA, deploy EDR protection, separate backups from the network and close critical vulnerabilities.
Processes and documents
We prepare the incident management procedure, security policies and a responsibility matrix, the documents that ISO 27001, NIS2 and DORA require.
Ongoing management
From then on we monitor alerts 24/7, scan for vulnerabilities every month, review access and report to management and auditors.
Frequently asked questions about cybersecurity
How is EDR different from antivirus?
Antivirus recognises known malware. EDR watches behaviour: unusual processes, encryption, access attempts. It stops an attack whose signature nobody has seen yet, and afterwards lets you investigate what happened.
Is EDR alone enough?
No. Most incidents start with identity (a password without MFA) or an unpatched system. That is why we combine EDR with MFA, vulnerability management, backups and an incident procedure.
What happens when the system detects an attack?
The alert comes to us, the device is isolated, the threat is stopped and an investigation starts under a documented procedure. We keep you informed as it progresses and provide an incident report.
Does this meet NIS2 and DORA requirements?
Yes. These are exactly the measures (EDR, MFA, vulnerability management, backups, incident procedure) and the evidence that both regulations require. Reports are prepared so they can be presented to a supervisory authority.
Related services
IT infrastructure management
Network, servers, databases, devices and web projects, managed as one system rather than separate services.
Managed IT for business: one price per user
We take over workstation management, security and employee support.
Expertise confirmed by certifications
This service is delivered by specialists with valid international certifications. Their expertise is confirmed by independent organisations, not by us.
-
Certified Information Security Manager
Security governance, policies and incident processes following the ISACA methodology.
-
Certified in Risk and Information Systems Control
Risks are assessed and controlled using the international IT risk methodology.
-
Certified Information Systems Auditor
Audit and evidence in line with international information systems audit standards.
Get a cybersecurity quote
Tell us how many workstations and servers you have, and we will send a quote with a platform recommendation within 1 business day.
We reply within 1 business day