Cybersecurity

Security is not just for certificates. It is there so your system keeps running and your data stays safe.

Since 2012 we have been building cybersecurity strategies with our clients: from business continuity plans and infrastructure architecture to day-to-day protection of their systems. We monitor services every 5 minutes, apply security patches without delay and restore core services within 5 minutes.

You focus on your business. We look after your systems.

Continuous protection

Every client with an SLA contract is covered by our monitoring and ongoing update management.

• Availability monitoring every 5 minutes, around the clock, for all services under contract.
• Vulnerability database updated every hour. Alerts about new flaws in the technologies we support appear immediately on the screens in our office.
• Security patches applied without delay as soon as the vendor releases them.
• Our own safeguards when no patch exists yet. If an attack vector is known but the vendor has not released a fix, we put temporary protection in place.
• Ongoing updates of operating systems, servers, CMSs and e-commerce platforms, without involving the client.
• Strict network access policy for servers and administrative services.

Our own tools

We build our own tools to eliminate the most common attack vectors on the platforms we maintain.

• Anti-skimming system (File Integrity Monitoring). Detects unauthorised changes to files on the server, including attempts to inject code that captures payment card data in online stores. Supports the PCI DSS 4.0 requirements on detecting changes to payment pages.
• Protection tools tailored to our clients' technologies: PrestaShop, Magento 2, TYPO3, WordPress and Symfony.

Security audits and testing

Since 2012 we have been carrying out security audits of IT systems, websites and online stores. We don't stop at the report: we can fix the vulnerabilities we find ourselves.

What does an audit involve?

We analyse the code, plugins and modules, and the server configuration. We combine automated tests based on the OWASP methodology with custom tests written by our team for each technology we support.

What does the client receive?

Audit documentation listing the vulnerabilities found, their risk level and how to remove them.

Can you fix vulnerabilities in a system you did not build?

Yes. On request, we prepare a modular quote for the remediation and hardening work.

Can our IT department do part of the work?

Yes. We enjoy working with IT teams responsible for security day to day. We can take over all the work or only selected tasks.

Who have we audited?

Among projects not covered by confidentiality agreements:

• local government and public bodies, including Olsztyn City Hall, the Regional Specialist Hospital in Olsztyn and the Olsztyn Polyclinic,
• large, medium and small companies, including Corab S.A. and KlipsData.

Business continuity and backups

For services under SLA, we restore core services within 5 minutes and big data systems within 30 minutes.

• Backup strategy designed together with the client: daily backups as standard, more frequent for critical systems, with a copy stored outside the main infrastructure.
• Regular restore tests. A backup that has never been restored gives no certainty.
• Architecture that limits the impact of an attack, including advice on building separate LANs for specific uses.

More: backup and data protection policy implementation.

When an incident happens

We guide the client through the whole incident, from detection to closure.

1. Isolating and securing the affected systems and the traces of the attack.
2. Forensic analysis: how the attack happened, what was compromised, what data may have leaked.
3. Remediation and bringing systems back online.
4. Support with mandatory notifications to the data protection authority (GDPR) and the competent CSIRT (NIS2).
5. Post-incident report with recommendations, which we implement so the attack does not happen again.

Has your website been infected? See: recovery of infected websites.

NIS2, GDPR and documentation for auditors

Organisations covered by the NIS2 directive need not only safeguards, but also proof that they apply them. We prepare documentation of the security measures in place and regular reports on monitoring, testing and updates, ready to present to management and auditors.

For clients covered by NIS2 and business-critical systems, we offer 24/7 on-call support for security incidents. Standard response times are described on the Technical support – SLA page.

Proven in practice

• About 20 years of maintaining client systems in Poland and France, about 2,500 projects delivered.
• September 2026: 3 post-breach audits of 3 different systems whose owners came to us after an incident.
• 2019: handling of a personal data breach, which ended with a positive assessment of our actions by the President of the Polish Personal Data Protection Office (UODO).

Why NETTOM

Most companies will give you a vulnerability report. We will too, and then we will fix the flaws ourselves, because maintaining systems like yours is our daily work.

• One partner responsible for the server, the application, backups and security.
• Code-level knowledge of the technologies our clients use.
• Documentation ready for management and auditors, with no extra consultant needed.

Book a free call about the security of your system