Services
Security operated by people who manage infrastructure.
Every service below is delivered for real clients in Romania: private companies, NIS2 entities and public institutions. Security, infrastructure, development and supply, with a scope of work defined together.
01 · Cybersecurity
Incident response and DFIR investigation
We take over the incident from the first alert to the final report accepted by the authorities. We work on three fronts in parallel: stopping the attack, preserving the evidence and meeting the legal obligations.
What we deliver
- Triage and isolation in hours, not days, including out of hours.
- Evidence preservation: disk images, system and access logs, memory, configurations.
- Forensic analysis: attack timeline, initial vector, extent of the compromise, data affected.
- DFIR report in the format expected by DNSC, plus an executive summary for management and shareholders.
- Legal notifications: DNSC (OUG 155/2024) and ANSPDCP (GDPR art. 33–34), drafted and filed on time.
- Hardening and recovery plan, with stages, owners and criteria for bringing systems back into service.
- Remediation and hardening: WAF, DDoS protection, MFA, segmentation, credential rotation, monitoring.
- Post-incident support for the users and clients of the affected system.
02 · Cybersecurity
NIS2 compliance (OUG 155/2024) and the relationship with DNSC
For essential and important entities that have received their classification decision and have a deadline ahead. We prepare the documentation the NIS officer files with DNSC and take the organisation from its declared level to the target level.
What we deliver
- Gap analysis against the OUG 155/2024 + Law 124/2025 framework, on a Compliant / Partially compliant / Non-compliant scale.
- Maturity self-assessment with the DNSC tool (EVAL_MMS, CyFun framework) and an action plan with deadlines.
- Complete documentation set: security manual, policies, operating procedures, registers, metrics dashboard.
- Technical implementation of the measures: MFA on remote access, centralised log collection, verified backup, awareness.
- Interface with DNSC and audit preparation.
03 · Cybersecurity
Penetration testing and security audit
Modular audit: you choose only the modules relevant to you, each with an effort estimate in person-days and a defined deliverable. Also suitable for regulated entities (DORA, ASF).
| Module | What it covers | Deliverable |
|---|---|---|
| External perimeter | Exposed services, DNS, e-mail (SPF/DKIM/DMARC), VPN, portals | Vulnerability report with severity and evidence |
| Internal network | Segmentation, lateral movement, internal services, Wi-Fi | Demonstrated attack paths, remediation plan |
| Active Directory / Entra ID | Privileges, delegations, policies, conditional access, MFA | Risk score and prioritised list |
| Web applications | OWASP, authentication, authorisation, API | Technical report + management summary |
| Logging and monitoring | What is visible, what is not, time to detect; SIEM readiness | Gap analysis and target architecture |
| On-site test | Physical security, network access from the premises | Findings and recommendations |
| Phishing / awareness | Simulated campaigns and training (through a partner) | Click rate, training plan |
04 · Cybersecurity
Outsourced CISO and managed security
Security officer and DNSC interface, firewall administration, monitoring and incident response, all in a monthly subscription. For organisations that have obligations but no team.
What it includes
- Designated cybersecurity officer, acting as the interface to DNSC
- Complete firewall administration (FortiGate, Forcepoint and others)
- 8/5 or 24/7 monitoring, as needed, with escalation procedures
- Endpoint and network security, patch management, verified backup
- Incident response included, with legal reporting
- Institutional security procedures, kept up to date
05 · Infrastructure
Virtualisation, Disaster Recovery and High Availability
We design, implement and manage VMware vSphere environments for production: on your premises, in colocation or on the NIW cluster. Every project starts from two figures agreed in writing, RPO and RTO, and ends with a documented DR test.
What we deliver
- Design and implementation of vSphere / vCenter clusters, ESXi hosts, SAN/NAS storage, storage network.
- High Availability: redundancy at host, storage, network and power level; tested automatic failover.
- Disaster Recovery: replication to a second site or to the NIW cluster, failover and failback procedures, periodic tests.
- Verified backup (NAKIVO or equivalent) with consistency verification and off-site copies.
- Migrations from old hardware, from other providers or from compromised environments, with no later re-platforming.
- Hosting and VPS on NIW infrastructure: own VMware cluster, dedicated storage, WAF/DDoS and managed DNS.
06 · Infrastructure
Networks, IT administration and user support
Outsource IT operations completely or just the parts that hurt: network and firewall, servers, Microsoft 365, help-desk. Modular or integrated, with a written SLA and reported hours.
What it includes
- Network: LAN/WAN design and administration, FortiGate firewall with IPS/IDS, site-to-site and remote-access IPsec VPN, managed Wi-Fi, structured cabling, VoIP.
- Windows and Linux servers: installation, hardening, patch management, Active Directory, file and application services.
- Microsoft 365: Entra ID, Exchange Online, Intune, conditional access, tenant and mailbox migrations.
- Monitoring with Zabbix on all systems, with alerting and escalation by procedure.
- Help-desk for users, remote and on-site in Bucharest, with a ticketing system and agreed response times.
07 · Development
Custom applications and integrations
When off-the-shelf applications do not fit your process, we write one ourselves: web applications, internal tools, client portals. And we connect them to what you already have, because an isolated application moves the work, it does not remove it.
What we deliver
- Web and internal applications: from operational workflows (scanning, inventory, approvals) to self-service portals for clients.
- Integrations via API between ERP, accounting, CRM, Microsoft 365, e-mail platforms and production equipment (scanners, terminals).
- Automation and data migrations between old and new systems, with validation and reconciliation.
- Taking over legacy applications: troubleshooting, stabilisation, documentation and, where appropriate, rewriting.
- Security by design: authentication with MFA, logging, backup and hosting on NIW infrastructure or your own.
08 · Supply
Hardware and Microsoft licences
We supply servers, workstations and network equipment that we then install and manage ourselves, plus genuine Microsoft licences, correctly sized, so you do not pay for what you do not use.
What we offer
- Servers, storage, UPSs, network equipment and firewalls, with configuration and commissioning
- Workstations, laptops and peripherals, prepared and enrolled in Intune / Active Directory before delivery
- Microsoft 365 (Business, Enterprise), Windows Server, SQL Server, Office licences, CALs
- Licensing audit and optimisation of existing subscriptions
- Warranty, replacement and management of the relationship with the manufacturer
Not sure where to start?
A 30-minute conversation helps us tell you what exposes you the most and what it would cost to fix.