ENCybersecurity · IT infrastructure · Software development
NOW IT WORKS has been designing, managing and securing IT infrastructure for companies in Romania for over a decade: virtualisation, networks, Microsoft 365, custom applications. When an incident happens, the same team investigates it, stops it, reports it to DNSC and ANSPDCP and stays with you until full recovery.
What we do
We have been running production infrastructure for over a decade and we secure it with the same hands. Six service lines, one team that answers the phone.
Digital investigation, stopping the attack, legal reporting and a recovery plan. Available when it happens, not on the next working day.
Gap analysis, complete documentation set, maturity assessment with the DNSC tool and penetration tests on infrastructure and network.
Designated security officer, interface with DNSC, firewall administration, monitoring and incident response, in a monthly subscription.
We design and manage VMware vSphere environments, with SAN storage, verified backup and Disaster Recovery or High Availability plans sized to how much you can afford to lose.
Complete administration of your infrastructure: network and firewall, Windows and Linux servers, Microsoft 365, monitoring, user help-desk, on-site in Bucharest.
Web and internal applications written for your process, integrations between the systems you already have, plus hardware and Microsoft licences delivered and configured by the team that will manage them.
Infrastructure
We do not sell architectures we do not operate. The stack below is running in production right now at NIW clients and on our own cluster, and it is the same one we recommend when designing a new environment or a DR plan.
Case study
A Romanian e-mail marketing service provider suffered a cyberattack that took the platform down and put the data of hundreds of clients in question. NIW took over the incident from the first hour: isolated the systems, preserved the evidence, identified the attack vector and wrote the DFIR report that DNSC accepted in full.
In parallel, we designed the hardening and recovery plan, put the platform behind WAF and anti-DDoS protection that we still manage today, and ran the support line for the platform's clients throughout the reconnection.
Read the full case studyWhy NIW
The same team that writes the DFIR report manages VMware clusters, FortiGate firewalls, Exchange Online and Linux servers. Our recommendations are workable because we are the ones who apply them.
Our reports have already been through DNSC. We know OUG 155/2024, Law 124/2025, GDPR and the ANSPDCP requirements, and the team is on the NIS2 auditor track (DNSC exam passed).
An incident does not end with the report. We take over the operation, protection and support of the affected platform for as long as needed, with hours documented in the access logs.
Hardware, Microsoft licences, installation, administration, backup and DR, custom applications and security: every link is delivered by the same team, with no passing of responsibility between suppliers.
We design environments to scale from the start, because re-platforming in production is the most expensive project there is. Every architecture comes with agreed RPO/RTO and a tested DR plan.
When an off-the-shelf application does not fit your process, we write it ourselves and integrate it with what you already have: ERP, accounting, Microsoft 365, production equipment.
The first hour decides what evidence survives. We tell you over the phone what not to touch, then we connect.