Risk assessment and security strategy
Understand weaknesses and priorities. We connect technical controls with responsibilities, processes and operational needs.
Cyber
security
Protecting data, networks and applications
We help businesses and organisations protect their data, applications and network infrastructure. Our work can include risk assessment, security strategy, technical controls, monitoring and support with incident response. The scope reflects your environment and priorities.
Where to start with cybersecurity
Identify the systems and information your organisation relies on and the impact of downtime or misuse. We use that context to assess weaknesses and prioritise controls, connecting technology, responsibilities and everyday operations.
How we can help
Network protection and access control
Network segmentation, communication rules and security technologies integrated into your infrastructure.
Device and data protection
Select and deploy controls for workstations, servers and sensitive information according to your risks.
Monitoring and incident investigation
Connect traffic monitoring with security event analysis to identify what needs attention and what to do next.
DDoS protection
FlowGuard helps protect the availability of internet services against traffic floods. We design protection for your environment.
IT and OT security
Controlled data transfer and separation of environments with different security requirements.
What you gain
A prioritised set of recommendations aligned with your risks and operations. Depending on the project, we follow through with technology design and deployment, monitoring and support for your internal team.
How we work together
-
Set priorities
Review critical systems, current controls, team capacity and the reasons for change.
-
Design the approach
Connect security controls, responsibilities and operational requirements.
-
Deploy and validate
Implement the solution and verify its operation within the agreed scope.
-
Support your team
Agree knowledge transfer, monitoring and further development.
Solutions for your security priorities
We use Group-IB for external threat visibility and OPSWAT for file and media security. These are typical use cases; we design the specific scope around your environment.
Group-IB: uncover external threats and brand abuse
Leaked credentials or a fake website can put your organisation and customers at risk. Group-IB technologies help connect external threat information with your security priorities.
- Threat IntelligenceInformation about threat actors, infrastructure and campaigns to support risk and event assessment.
- Digital Risk ProtectionDetection of phishing, fraudulent websites and misuse of your brand.
- Data leak monitoringVisibility into exposed company information and compromised credentials.
From external signals to team action
-
Monitor
Relevant domains, brands and sources of leaked information.
-
Assess
Context, severity and priority for your organisation.
-
Respond
Findings for your security team and follow-up action.
When to use Group-IB
Someone impersonates your company
Situation: Customers receive links to a fake login or shopping portal.
Solution: Monitor fraudulent domains and content, assess findings and prepare response information.
Benefit: Visibility into brand abuse so your team can address customer risk earlier.
Company credentials appear in a data leak
Situation: Your IT team needs to establish which accounts may be compromised.
Solution: Monitor relevant leaks and pass findings into your incident response process.
Benefit: Evidence to verify accounts, revoke sessions and change credentials.
ComSource helps define the domains, brands and scenarios to monitor, select suitable modules and agree how findings reach your team.
OPSWAT: check files before they enter your environment
Customer documents, maintenance files and USB media can carry malicious content. With OPSWAT MetaDefender, we help design file checks at the points where data enters your organisation.
- Layered inspectionScan files using multiple anti-malware engines.
- Content sanitisation (CDR)Remove potentially dangerous active content from supported file formats.
- Removable media checksUse MetaDefender Kiosk to inspect USB and other media before use.
Control files at the point of entry
-
Receive
A file arrives through a portal, a supplier or removable media.
-
Inspect
Scan and, where appropriate, sanitise the supported file type.
-
Decide
Release or block the file according to configured policies.
When to use OPSWAT
A technician brings files into production
Situation: An external supplier needs to transfer files into an environment with limited connectivity.
Solution: Establish a media inspection point and rules for which files can proceed.
Benefit: Controlled file entry into OT with a traceable inspection result.
Customers upload documents to a portal
Situation: Employees process attachments from unknown devices.
Solution: Inspect and, depending on file type, sanitise documents before passing them to internal systems.
Benefit: Reduce the risk of malicious content in everyday document workflows.
ComSource maps file entry routes, selects suitable components and designs their integration. The scope depends on file types, volumes and operational requirements.
Technologies for the assets you protect
Tools must work with your processes and existing infrastructure. We select technologies and deployment scope to match your requirements.
HPE Juniper Networking
Firewalls and network communication protection.
SentinelOne
Endpoint protection and information for detecting and investigating security events.
Novicom, Ivanti and Progress Flowmon
Access management and protection, alongside visibility into network traffic, selected for the relevant security scenario.
Protect availability with FlowGuard
DDoS attacks can overwhelm internet services and make them unavailable to customers. FlowGuard is our DDoS protection solution. We work with your team to identify critical services and design suitable protection.
Security in practice
AERO Vodochody
Moving from reactive interventions to a systematic security strategy combining controls, monitoring and operational needs.
Prague Airport
Renewal of central firewalls in a complex operational environment.
Cybersecurity FAQs
Where do we start if we do not know all our weaknesses?
We identify critical systems and data, current controls and key risks, then propose the assessment scope and next steps.
Can we use our existing technologies?
We first assess their capabilities, configuration and dependencies. The design may combine changes to the existing environment with additional tools.
How does monitoring relate to data analytics?
Monitoring supplies events and operational records. Analysis connects them in context to support decisions. Explore operational and security data analytics.
Security also starts with the network
Traffic separation and sound communication design are part of infrastructure protection. Explore our network design and modernisation services.