Businesses Private clients
Remote assistance Help
Paying as a business Bank transfer via SWIFT, or card Is this invoice genuinely ours? PDF, ebInterface and ZUGFeRD
Deutsch English
Send an enquiry
Services
Solutions
Pricing
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT services Your IT team without the office desk: devices, logins and servers kept running from afar All-inclusive IT support One flat monthly price covering PCs, Microsoft 365 and your servers IT helpdesk Staff report an issue via mail, portal or a Teams chat and get screen-share help fast Service desk One front door for all requests, priorities tied to the SLA, a monthly summary for the boss Round-the-clock support Engineers on standby overnight, at weekends and over public holidays Start, Business and Premium plans Monthly care starting at €890 plus VAT
Service plans and SLAs Contractual reaction times of 4 hours, 1 hour or 15 minutes System administration Logins, virtual hosts, shared drives and infected machines, all fixed through an encrypted session IT infrastructure A candid stocktake, quicker machines and desktops streamed from the cloud Network and telephony Firewall and WLAN audited, connections watched, calls handled inside Microsoft Teams Cloud and hostingNew Servers, shop hosting, S3 storage and mailboxes hosted in Austria or elsewhere in the EU Backup and recovery Copies kept off the premises, separated from the company network, restored on a schedule to prove they work
GDPR and data protection Processing register, AVV contracts and safeguards aligned with GDPR and Austria's DSG Security policies and documentation Written house rules you can hand to an auditor or use for NIS2 groundwork Security solution roll-out We pick the product, install it and tune the rule set Infrastructure security Network zones, a cleaned-up rulebase and servers with nothing needlessly exposed Application security Reviewed code and deployments that stay free of new gaps Data loss prevention (DLP) Keeps sensitive files from leaving via mail attachments, flash drives or file shares Database security Tight rights, encrypted tables and an audit trail of every query Web application firewall (WAF) Bad traffic and bots stopped before reaching your site, Shopware store or API Access control and endpoint protection MFA, Intune policies and laptops you control centrally VPN and encryption Safe tunnels for home working and BitLocker on every notebook Vulnerability scans Regular scanning with fixes prioritised by severity Antivirus and EDR Malicious activity spotted, the compromised device quarantined immediately SOC monitoring Every alert reviewed by a human, clear-cut attacks contained automatically at night too System hardening Factory defaults locked down using CIS benchmarks and BSI recommendations Safe use of AI Ground rules for what may be typed into Copilot or ChatGPT
Websites and web applications 14 services spanning one-page sites to B2B portals, with SEO, care plans and post-hack repair E-commerce and integrations Webshop wired up to BMD or RZL, Amazon, eps and Austrian Post Custom software Line-of-business tools, apps and APIs that follow your processes, not the other way round Software testing and QA Defects and slowdowns caught while they are still cheap to fix
Artificial intelligenceNew Practical AI work, from spotting the right opportunity to staff training under the AI Act Data and analytics Tidy master records, a single reporting base and invoices read in automatically IT advisory and audit A second opinion on your IT plans and on how the pieces connect Online marketing Leads followed from the ad click to the signed offer, tracked in a CRM
Software and licensing Official subscriptions for IDEs, monitoring suites and sysadmin tools Training Instructor-led online sessions for teams or individuals
No idea which step comes first? We review your setup over a remote session and email you a prioritised action list Request a review
Browse all 13 solutions
NIS2 readiness Check whether you fall in scope, then set up risk handling, incident reporting and proof GDPR compliance Paperwork and technical controls in order well before the DSB comes knocking Remote and hybrid work Employees reach files and programs safely wherever they happen to be working Downtime prevention Proven backups, monitoring and an emergency playbook prepared in advance
Retail and e-commerce Shopware or WooCommerce joined up with marketplaces, eps and couriers Manufacturing ERP, servers and plant network monitored so the shop floor keeps running Medical practices and healthcare Ordination software, ELGA and e-card stable, with health data locked down Construction Plans, BIM files and AVA data synced to tablets on site Logistics and transport WMS, carrier links and dispatch that survives an outage
Small businesses A well-run Microsoft 365 and help on hand, no IT hire needed Mid-sized companies Infrastructure and security under a signed service agreement Large enterprises Assigned engineers, fast reaction and reporting to your CIO Multi-site companies Identical IT at every branch, administered from one place
Your case looks different? Describe it in a few lines, and we assemble only the pieces that matter to you Send an enquiry
About us The people behind Apply and our remote-only way of working Payment Invoices, electronic formats and due dates Contact Mailboxes, our web form, plus Teams or Meet calls
Service · IT security

System hardening

Operating systems and cloud services are shipped to work as smoothly as possible, not to be as secure as possible. Windows Server still speaks legacy protocols so that a twenty-year-old scanner keeps working. Microsoft 365 lets any user grant third-party apps access to their mailbox. A fresh Linux server accepts password logins, and routers and printers arrive with factory credentials. None of this is a bug as such, but together it adds up to an attack surface that can be shrunk considerably with built-in tools. Hardening means going through these settings methodically and switching off everything that is not needed. It costs no new licences, only care: you have to know which printer needs which protocol before you turn it off. Our yardsticks are recognised guidance such as the CIS Benchmarks, Microsoft security baselines and the Austrian Information Security Handbook, adapted to what actually runs in your business.

Send an enquiry Inclusions overview
Nothing to buy
settings only, no new licences
CIS Benchmarks
and Microsoft baselines as the yardstick
Deviations
justified and documented
Regular checks
so nothing slides back

Everything this covers

We harden layer by layer, from the cloud tenant down to a single printer. Each layer is assessed, changed and then tested.

Settle the details with an engineer

Microsoft 365 and Entra ID

User consent to third-party apps only after approval, no automatic forwarding to outside addresses, audit logging on, tighter defaults for sharing and Teams guest access.

Windows workstations

Security baselines through Intune or Group Policy, internet macros blocked, a unique local admin password per device, unneeded services disabled, credential protection enabled.

Windows Server and Active Directory

Legacy protocols such as SMBv1 and NTLMv1 switched off, a tiered model for admin accounts, domain controllers locked down, stale accounts and groups removed.

Linux servers

Key-based login only, no direct root login, a host firewall, automatic security updates and a minimal package set.

Network gear and printers

Factory passwords replaced, insecure management access such as Telnet or plain HTTP closed, firmware updated, unused features like scan-to-FTP turned off.

Drift detection

Automated checks at intervals confirm the hardened settings still apply, for instance after updates or after someone changed something while troubleshooting.

Our working method

Hardening can break things if done without preparation, so we move in small, verifiable steps.

01

Gap analysis

An automated comparison of your systems against the chosen guidance. You get a list of deviations with risk and likely side effects.

02

Agreement

Together we decide what changes and where justified exceptions apply, for example an older machine controller that relies on an old protocol.

03

Changes in waves

Test systems and a pilot group first, then everyone else. Changes are made remotely in maintenance windows, with a documented rollback.

04

Verification

A re-check and handover of the exception list with reasons. Ongoing monitoring within a service plan if you wish.

The cheapest security measure is one you have already paid for. Many successful attacks on SMEs exploit settings that could have been closed with built-in tools: a legacy protocol, open app consent, a factory password on a printer. Hardening costs working time, not new software.

Frequently asked questions

If done carelessly, yes. That is why we test with a pilot group first, confirm with the software partner which protocols and rights the application needs, and document justified exceptions instead of abandoning the hardening.

The assessment takes a few days; implementation takes two to six weeks depending on findings, because we work in waves and wait after each one to see whether problems appear.

Freely available configuration recommendations for operating systems, cloud services and applications, maintained by a non-profit organisation. They are not law, but they are a widely accepted yardstick that auditors also refer to.

Mostly yes, if it is applied through Intune or Group Policy. Major feature updates can introduce new settings, though, which is why we recommend regular automated checks.

Related work in the same area

Open the full area page
Service GDPR and data protection Data map, permissions, audit logs and a plan for the first 72 hours Service Security policies and documentation A policy, a risk assessment and procedures that people actually follow Service Security solution roll-out Choosing, piloting and deploying tools remotely Service Infrastructure security Perimeter, network segments and safe remote access

Shut what ships open by default

Give us a rough outline of your systems. We will tell you which hardening steps pay off most in comparable environments.

Availability
Monday to Friday, 8:00-17:00 Austrian time (CET/CEST), reply within one working day
Meetings
By video on Microsoft Teams or Google Meet

We only use cookies that are technically required: to run the website and to remember the location you picked. There are no advertising or tracking cookies. Details are in the privacy notice.