Security with no blind spots.
A once-a-year audit feels reassuring, but it's already outdated the next day, and nobody in-house is ever quite sure where to start with NIS2 compliance. As a managed security service provider for SMEs, we deliver EDR endpoint protection, SOC as a service via certified partners, and NIS2 compliance consulting - security as an ongoing process, not a one-off tick on a checklist.
- EDR endpoint protection: threats are detected and blocked directly on your devices
- SOC as a service via certified partners for 24/7 threat detection
- Continuous hardening instead of a once-a-year audit, security as an ongoing process
- NIS2 compliance consulting: baseline assessment, action plan, implementation up to audit readiness
- Step-by-step AD hardening prioritised by risk and effort, instead of turning everything upside down at once
- IT compliance provider: data processing agreement (DPA) under Art. 28 GDPR, available on request
EDR endpoint protection
Detecting and blocking threats directly on your endpoints, not after the fact.
SOC as a service
Connection to a Security Operations Center via certified partners for 24/7 threat detection.
Security as a process
Continuous hardening instead of a one-off audit, so compliance stays current.
What we often see in practice
At mid-sized companies we regularly find Active Directory permissions that have grown for years and that nobody fully understands anymore - usually because cleaning them up kept getting postponed, out of concern for breaking something that still works. A step-by-step, risk-based hardening approach solves exactly that, without putting day-to-day operations at risk.
Not sure where your AD environment stands today? Call us or use the contact form.
From our work
- Client
- Public broadcaster
- Challenge
- 87 Group Policy Objects with over 3,600 individual settings controlled all Windows clients exclusively through local Active Directory - the brief was to move to cloud-native device management without locking themselves out during the transition.
- Result
- Developed an Entra ID join-only concept, categorised 61 of 87 GPOs, prepared a zero-trust policy set, and rolled it out in stages through pilot rings backed by emergency accounts.
Four steps, one point of contact.
Assessment
Analysis of the current security posture, vulnerabilities and compliance requirements.
Hardening
Implementing concrete measures across Active Directory, endpoints and network.
Integration
Integrating EDR and SOC monitoring for ongoing threat detection.
Ongoing operations
Regular review and adjustment to new threats and requirements.
IT Security & Compliance in detail.
Does this concretely help with NIS2 compliance?+
Yes. Our NIS2 compliance consulting starts with a baseline assessment, draws up an action plan and implements the key points up to audit readiness.
Do we need to rebuild our existing AD structure from scratch?+
Usually not. We harden and clean up step by step, prioritised by risk and effort, instead of turning everything upside down at once.
What exactly does SOC as a service deliver?+
A connection to a Security Operations Center via certified partners for 24/7 threat detection - not just logs nobody ever looks at.
Do you also handle implementation, not just advice?+
Both. The assessment is followed by concrete implementation of measures across Active Directory, endpoints and network.
How is this handled regarding our data and GDPR?+
Through a separate data processing agreement (DPA) under Art. 28 GDPR, which we provide on request.
Security that never stands still.
Call us or send your request through the contact form - we'll assess your security posture together and respond within 48 hours.