Cyber security
Firewall and network security
On a flat network, an infected laptop sees everything: servers, cameras, the till, the accountant's computer. Segmentation does not prevent infection, but it drastically limits how far it gets.
What is included
Firewall configured for the need
Rules written for the company's actual traffic, not the defaults left over from installation.
Network segmentation
Servers, workstations, surveillance equipment and the guest network kept apart. A compromise stays in its segment.
Secure remote access
VPN with two-factor authentication, instead of ports left open to the internet — the most common way in that we find.
Guest network
Visitors and personal phones reach the internet, not the company network.
Monitoring
Alerts on unusual traffic: connections to suspicious destinations, large transfers outside working hours.
Documentation
Network diagram and firewall rules, written down. The next person to open the device understands what they see.
Open ports
The most common problem we find at a first audit: remote access exposed directly to the internet so somebody can log in from home. Those ports are scanned automatically and continuously, from all over the world.
The answer is not to give up remote access, but to route it through a VPN with two-factor authentication. Same convenience, without the door left open.
Why segmentation matters
Surveillance cameras, printers and smart devices are rarely updated and often run old software. On a flat network they become the way into everything else.
Frequently asked questions
01We have a router from our internet provider. Is that enough?
For a home, yes. For a company with servers and client data, no: it has no segmentation, no useful logging, and cannot do VPN with two-factor authentication.
02Does segmentation complicate day-to-day work?
Not if it is designed around who needs to reach what. Users notice nothing; what changes is only what can reach what during an incident.
Let's work out exactly what you need.
We look at the current situation, tell you what is worth changing and what can wait, then you get a quote with clear figures.
Request a conversation
Write us a few lines about the situation in your company and we will come back with a concrete proposal.
Other services
We cover the whole chain, from infrastructure down to repairing a single device.
Cyber security
Managed protection for workstations, servers and accounts — with visibility into what is happening, not just an antivirus installed.
View service
Backup and disaster recovery
Backups on the 3-2-1 rule, with periodically tested restores — the one measure that holds when everything else gives way.
View service
IT security audit
An honest assessment of where you stand: what is exposed, how likely it is to be exploited, and what to fix first.
View service