For business For individuals For public sector For partners
Request an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский English 中文
Sign in
Services
Solutions
Service plans
Case studies
Training
About us
Contacts
Sign in
All services
Basic Up to 15 workstations, business-hours support Standard Up to 50 workstations, 24/7 support, servers and network Premium Dedicated team, 15-minute response Project-based One-off work at a fixed quote Free IT audit Infrastructure assessment in 5 days
IT outsourcing and technical support Requests, on-site engineers, 24/7 Service Desk Support levels and SLA Response time fixed in the contract System administration Windows and Linux servers, AD, virtualisation IT infrastructure Core environment, assessment, VDI Networks and telecom Structured cabling, design, audit and monitoring Low-voltage systems Video surveillance and access control Cloud services and hostingNew VPS/VDS, servers for 1C and Bitrix, S3 Backup Backups, cloud storage, recovery plan
Regulatory requirements 152-FZ, personal data, documentation Protection of systems and data Infrastructure, applications, databases, WAF Monitoring and control SOC, vulnerability scanners, antivirus protection Security tools Supply and deployment of security tools, VPN and cryptography
Websites and web development From a business card site to a B2B platform on 1C-Bitrix E-commerce and integrations 1C exchange, payments, delivery, marketplaces Bitrix24 and portals Portal and CRM implementation, licences Custom development Purpose-built services, mobile applications Testing and QA Functional, load and automated testing
Artificial intelligenceNew AI implementation, strategy, staff training Data and analytics Data quality, warehouses, document processing Consulting and audit Digital strategy, systems and architecture audit Marketing Audit, sales funnel, consulting
Workstations Desktops, laptops, peripherals, consumables Servers and networks Servers and storage, network hardware, UPS Retail equipment Online POS, product labelling, scanners Software Antivirus, development and admin software Training Corporate, group and individual
Not sure what to choose? We will run a free infrastructure assessment in 5 days Request an audit
All solutions
Import substitution Migration to Russian software and hardware 152-FZ compliance Documents and safeguards ready for an inspection Office relocation Network, servers and workstations at the new site Opening a branch Standard setup and a link to head office Remote work VDI, 1C access, secure channels Downtime protection Backups, monitoring, recovery plan
Retail and e-commerce POS, product labelling, online store, 1C exchange Manufacturing Shop-floor networks, servers, accounting systems Healthcare Personal data protection, fault tolerance Construction Site-to-site connectivity, workstations, CAD Logistics Warehouse, data terminals, integrations and monitoring Public sector Import substitution, portals, FSTEC requirements
Small business Up to 15 workstations, basic support Mid-sized business Servers, network and 24/7 support Large business Dedicated team, SLA, reporting Branch network One IT standard across every location
No suitable scenario? Describe your task and we will propose a solution that fits your terms Submit a request
About us What we do and how we work Special offers Current promotions and terms Contacts Phone, email and office address

Regulatory requirements

Companies start with this group when a letter arrives from the regulator or a counterparty asks for personal data documentation.

Assess your readiness

Full 152-FZ compliance package

From assessment to inspection readiness: we determine the data categories and protection level, prepare the documents and deploy the technical measures.

Personal data security

Processing and storage rules: where employee and client data is kept, who has access, how consent is recorded and when data is deleted.

Governance documentation

Orders, policies, regulations, the threat model and logs. The set an inspector asks for first and judges everything else by.

Technical protection

Security tools are selected for a specific threat model, not on the principle of installing the best of everything. Unnecessary tools complicate the work and do not pay off.

Supply and deployment of security tools

Selection of certified security tools for your protection level, licence supply, configuration and commissioning.

Infrastructure protection

Perimeter, servers and workstations: firewalling, network segmentation and control of connected devices.

Application protection

Tracking vulnerabilities in code, checking dependencies and setting up a secure build before release to production.

Data protection

Encryption of drives and channels, leak prevention and rules for handling documents outside the company perimeter.

Database protection

Access separation at the database level, query auditing and masking of sensitive fields in test copies.

Web application protection with WAF

Filtering attacks before the request reaches the application: injections, password brute force and automated scraping.

Protection against unauthorised access

Control over system logins, two-factor authentication and rights limited to the necessary minimum.

VPN and cryptography

Secure channels between offices and for remote employees, including on certified solutions.

Vulnerability scanners

Regular scanning of hosts and services for known weaknesses, with prioritisation: what to fix today and what can wait for planned work.

Monitoring and ongoing control

Protection that is set up once and forgotten becomes outdated within months. These services keep it from degrading.

Antivirus protection A single console for all company devices SOC: incident monitoring 24/7 event monitoring and response Hardening infrastructure security Remediation of risks found during the audit Security of AI systems Control over models and training data

In what order this is rolled out

Trying to cover everything at once is expensive and usually goes nowhere. Here is a sequence that works.

01

Assessment

What data is processed, where it is stored and who has access. This determines the data category and the required protection level.

02

Threat model

We define what exactly we are defending against. This document rules out unnecessary security tools and saves budget.

03

Documents and baseline measures

The governance document set, access rules, updates and antivirus. This covers most inspection findings and typical attacks.

04

Security tools and monitoring

We deploy security tools that match the threat model and set up event monitoring so an incident does not go unnoticed.

A fine for mishandling personal data is not the only risk. A leaked client database damages your reputation more than any regulatory order, and recovering from ransomware without working backups can halt the company for weeks.

Frequently asked questions

Yes. The personal data law makes no exceptions for size: if you keep employee records and client contacts, you are a personal data operator with all the obligations that follow. The workload for a small company is smaller, but the same set of documents is required.

For formally passing an inspection, sometimes yes, but that protects you from a fine, not from a breach. We always show which part of the package satisfies the regulator and which actually reduces risk, and let you choose knowingly.

It depends on the required protection level and on whether you work with public sector clients. In some cases certification is mandatory, in others any reliable solution will do. This is determined during the assessment, before any purchase.

It is a service that watches events in your infrastructure around the clock and responds to suspicious ones. A small company is usually fine with a centrally managed antivirus and configured alerts. A SOC makes sense when you have something to lose and downtime is measured in money per hour.

The document set for a typical company takes about ten business days after the assessment. Deploying the technical measures depends on the infrastructure and usually takes one to three months.

Related areas

The whole catalogue
Area 05 Networks and telecom Network segmentation and perimeter protection Area 08 Backup The last line of defence against ransomware Area 14 Testing and QA Finding vulnerabilities before release Area 20 Software Antivirus and security tool licences

We will assess your inspection readiness

Tell us what data you process and what has already been done. We will run an assessment and show the gap between where you are and what is required.