For business For individuals For public sector For partners
Request an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский English 中文
Sign in
Services
Solutions
Service plans
Case studies
Training
About us
Contacts
Sign in
All services
Basic Up to 15 workstations, business-hours support Standard Up to 50 workstations, 24/7 support, servers and network Premium Dedicated team, 15-minute response Project-based One-off work at a fixed quote Free IT audit Infrastructure assessment in 5 days
IT outsourcing and technical support Requests, on-site engineers, 24/7 Service Desk Support levels and SLA Response time fixed in the contract System administration Windows and Linux servers, AD, virtualisation IT infrastructure Core environment, assessment, VDI Networks and telecom Structured cabling, design, audit and monitoring Low-voltage systems Video surveillance and access control Cloud services and hostingNew VPS/VDS, servers for 1C and Bitrix, S3 Backup Backups, cloud storage, recovery plan
Regulatory requirements 152-FZ, personal data, documentation Protection of systems and data Infrastructure, applications, databases, WAF Monitoring and control SOC, vulnerability scanners, antivirus protection Security tools Supply and deployment of security tools, VPN and cryptography
Websites and web development From a business card site to a B2B platform on 1C-Bitrix E-commerce and integrations 1C exchange, payments, delivery, marketplaces Bitrix24 and portals Portal and CRM implementation, licences Custom development Purpose-built services, mobile applications Testing and QA Functional, load and automated testing
Artificial intelligenceNew AI implementation, strategy, staff training Data and analytics Data quality, warehouses, document processing Consulting and audit Digital strategy, systems and architecture audit Marketing Audit, sales funnel, consulting
Workstations Desktops, laptops, peripherals, consumables Servers and networks Servers and storage, network hardware, UPS Retail equipment Online POS, product labelling, scanners Software Antivirus, development and admin software Training Corporate, group and individual
Not sure what to choose? We will run a free infrastructure assessment in 5 days Request an audit
All solutions
Import substitution Migration to Russian software and hardware 152-FZ compliance Documents and safeguards ready for an inspection Office relocation Network, servers and workstations at the new site Opening a branch Standard setup and a link to head office Remote work VDI, 1C access, secure channels Downtime protection Backups, monitoring, recovery plan
Retail and e-commerce POS, product labelling, online store, 1C exchange Manufacturing Shop-floor networks, servers, accounting systems Healthcare Personal data protection, fault tolerance Construction Site-to-site connectivity, workstations, CAD Logistics Warehouse, data terminals, integrations and monitoring Public sector Import substitution, portals, FSTEC requirements
Small business Up to 15 workstations, basic support Mid-sized business Servers, network and 24/7 support Large business Dedicated team, SLA, reporting Branch network One IT standard across every location
No suitable scenario? Describe your task and we will propose a solution that fits your terms Submit a request
About us What we do and how we work Special offers Current promotions and terms Contacts Phone, email and office address

What is included

We look at applications not as programs but as the places where your data sits and through which it leaves.

Discuss the scope

Rights separation

Roles by job function instead of full access. A sales manager should not be able to export the entire client database.

Integration accounts

Each exchange runs under its own account with minimal rights rather than as an administrator.

API control

Restricting access to programming interfaces by address and key, limiting the request rate.

Action logging

Who changed and exported what. Without it an incident cannot be investigated.

Updates

A procedure for installing security fixes with a test environment.

Vulnerability testing

Scanning the applications and reviewing the results with prioritisation.

How the work runs

The main work is not technical but agreeing who genuinely needs to see what.

01

Inventory

A list of the applications, who uses them, which data they hold and where it is sent.

02

Rights matrix

We agree with the department heads which roles are needed and what they include.

03

Implementation

We configure the roles, move integrations onto separate accounts and switch on logging.

04

Review

Every six months we check that the rights are still current: people change jobs while their access stays.

Rights accumulate and are almost never revoked. An employee moves from department to department, gaining new access each time, and three years later can see half the company. A regular rights review closes this without a single purchase.

Frequently asked questions

It does, and they are enough for most tasks. The problem is usually not a missing mechanism but that everyone has been given the full rights role because it was simpler. Configuring roles around real duties solves the question without any additional products.

Restrict them from the outside: access to the application only from a particular network segment, only for particular users, with connection logging. That does not give full protection but it sharply narrows the surface.

For applications reachable from the internet, at least quarterly and after every major update. For internal ones, every six months. More important than the frequency is that the results are worked through rather than filed away in a report.

Other services in this area

The whole area
Service Full personal data compliance package Documents, measures and readiness for an inspection, turnkey Service Personal data security Technical protection of employee and client data Service Policies and internal regulations Policies, orders, procedures and regulations Service Supply and rollout of security tools Selection, supply and configuration of protection tools

We will put your access rights in order

Tell us which systems you use. We will look at who sees what and where integrations run with excessive rights.