Businesses Private clients
Remote assistance Help
Paying as a business Bank transfer via SWIFT, or card Is this invoice genuinely ours? PDF, ebInterface and ZUGFeRD
Deutsch English
Send an enquiry
Services
Solutions
Pricing
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT services Your IT team without the office desk: devices, logins and servers kept running from afar All-inclusive IT support One flat monthly price covering PCs, Microsoft 365 and your servers IT helpdesk Staff report an issue via mail, portal or a Teams chat and get screen-share help fast Service desk One front door for all requests, priorities tied to the SLA, a monthly summary for the boss Round-the-clock support Engineers on standby overnight, at weekends and over public holidays Start, Business and Premium plans Monthly care starting at €890 plus VAT
Service plans and SLAs Contractual reaction times of 4 hours, 1 hour or 15 minutes System administration Logins, virtual hosts, shared drives and infected machines, all fixed through an encrypted session IT infrastructure A candid stocktake, quicker machines and desktops streamed from the cloud Network and telephony Firewall and WLAN audited, connections watched, calls handled inside Microsoft Teams Cloud and hostingNew Servers, shop hosting, S3 storage and mailboxes hosted in Austria or elsewhere in the EU Backup and recovery Copies kept off the premises, separated from the company network, restored on a schedule to prove they work
GDPR and data protection Processing register, AVV contracts and safeguards aligned with GDPR and Austria's DSG Security policies and documentation Written house rules you can hand to an auditor or use for NIS2 groundwork Security solution roll-out We pick the product, install it and tune the rule set Infrastructure security Network zones, a cleaned-up rulebase and servers with nothing needlessly exposed Application security Reviewed code and deployments that stay free of new gaps Data loss prevention (DLP) Keeps sensitive files from leaving via mail attachments, flash drives or file shares Database security Tight rights, encrypted tables and an audit trail of every query Web application firewall (WAF) Bad traffic and bots stopped before reaching your site, Shopware store or API Access control and endpoint protection MFA, Intune policies and laptops you control centrally VPN and encryption Safe tunnels for home working and BitLocker on every notebook Vulnerability scans Regular scanning with fixes prioritised by severity Antivirus and EDR Malicious activity spotted, the compromised device quarantined immediately SOC monitoring Every alert reviewed by a human, clear-cut attacks contained automatically at night too System hardening Factory defaults locked down using CIS benchmarks and BSI recommendations Safe use of AI Ground rules for what may be typed into Copilot or ChatGPT
Websites and web applications 14 services spanning one-page sites to B2B portals, with SEO, care plans and post-hack repair E-commerce and integrations Webshop wired up to BMD or RZL, Amazon, eps and Austrian Post Custom software Line-of-business tools, apps and APIs that follow your processes, not the other way round Software testing and QA Defects and slowdowns caught while they are still cheap to fix
Artificial intelligenceNew Practical AI work, from spotting the right opportunity to staff training under the AI Act Data and analytics Tidy master records, a single reporting base and invoices read in automatically IT advisory and audit A second opinion on your IT plans and on how the pieces connect Online marketing Leads followed from the ad click to the signed offer, tracked in a CRM
Software and licensing Official subscriptions for IDEs, monitoring suites and sysadmin tools Training Instructor-led online sessions for teams or individuals
No idea which step comes first? We review your setup over a remote session and email you a prioritised action list Request a review
Browse all 13 solutions
NIS2 readiness Check whether you fall in scope, then set up risk handling, incident reporting and proof GDPR compliance Paperwork and technical controls in order well before the DSB comes knocking Remote and hybrid work Employees reach files and programs safely wherever they happen to be working Downtime prevention Proven backups, monitoring and an emergency playbook prepared in advance
Retail and e-commerce Shopware or WooCommerce joined up with marketplaces, eps and couriers Manufacturing ERP, servers and plant network monitored so the shop floor keeps running Medical practices and healthcare Ordination software, ELGA and e-card stable, with health data locked down Construction Plans, BIM files and AVA data synced to tablets on site Logistics and transport WMS, carrier links and dispatch that survives an outage
Small businesses A well-run Microsoft 365 and help on hand, no IT hire needed Mid-sized companies Infrastructure and security under a signed service agreement Large enterprises Assigned engineers, fast reaction and reporting to your CIO Multi-site companies Identical IT at every branch, administered from one place
Your case looks different? Describe it in a few lines, and we assemble only the pieces that matter to you Send an enquiry
About us The people behind Apply and our remote-only way of working Payment Invoices, electronic formats and due dates Contact Mailboxes, our web form, plus Teams or Meet calls
Service · IT security

SOC monitoring

An attack nearly always leaves traces long before files are encrypted or money moves to a stranger’s account. A sign-in from an unusual country at three in the morning, a new forwarding rule in the bookkeeper’s mailbox, a service account suddenly granted admin rights, a surge of failed VPN logins. Each of these traces sits in a different log: Entra ID, Exchange Online, the firewall, the domain controller. On their own they look harmless; together they tell a story. A security operations centre, or SOC, brings those logs together, searches them for patterns and responds when something is off. For a large corporation that means a dedicated team working shifts. For an SME with 20 to 200 staff it is neither affordable nor necessary. We offer SOC monitoring sized to your organisation: clearly defined sources, tuned detection rules and response steps agreed with you in advance.

Send an enquiry Inclusions overview
Central logs
from cloud, network, servers and endpoints
Detection rules
tuned to your environment
Response steps
agreed with you beforehand
Retention
long enough for forensic analysis

Everything this covers

Not every log is equally valuable. We begin with the sources that reveal the most attacks and add others step by step.

Settle the details with an engineer

Connecting sources

Entra ID and Microsoft 365, firewall and VPN, domain controllers and key servers, EDR alerts, and where needed the web shop and cloud platforms. Collected in Microsoft Sentinel or a comparable platform with storage in the EU.

Detection rules

Rules for common attack patterns such as impossible travel, new mailbox rules, privilege escalation or mass deletion, supplemented by rules for your particular set-up.

Alert triage

Every alert is reviewed by an analyst: false positive, harmless explanation or real incident. False positives lead to a rule adjustment so they do not return.

Response

Pre-agreed actions such as disabling an account, ending sessions or isolating a device, combined with notifying your designated contacts.

Incident handling

In a serious incident, support with containment, evidence preservation and recovery, and preparation of the details needed for a report to CERT.at, to the authority responsible for NIS2 or to the Data Protection Authority where that is required.

Reporting

A monthly report with alerts, incidents, trends and recommendations, written so management can follow it.

Our working method

A SOC needs a few weeks to learn your environment. In that time a flood of messages becomes a useful early-warning system.

01

Planning

Agreeing sources, coverage hours, contacts and the actions we may take without asking first.

02

Onboarding

Setting up log forwarding, checking completeness, first rules in observation mode.

03

Learning phase

Two to four weeks of tuning: what is normal for you and which alerts are noise. After that the false-positive rate drops sharply.

04

Steady state

Ongoing monitoring, response according to the playbook, a monthly report and a review of rules and sources every six months.

The time between intrusion and damage is your most valuable resource. Days often pass between the first suspicious sign-in and the encryption of the servers. If someone sees the traces and acts in that window, you are spared the restore from backup and the difficult conversations with customers and authorities.

Frequently asked questions

Our standard coverage is Monday to Friday, 8:00-17:00 Austrian time, with automatic actions for clear-cut cases at any hour. Premium includes standby outside those hours. The right level depends on how long your business can tolerate an incident going unnoticed.

Yes, because you detect incidents early and have the necessary details to hand quickly. The duty to report and its deadlines follow from NIS2 and the Austrian rules implementing it, and your company submits the report to the competent authority itself. We prepare the technical information. Whether an incident is reportable is something you decide together with your legal adviser.

On a platform with storage in the EU, for example an Azure workspace in a European region. Logs contain personal data, so access, retention periods and the data processing agreement are settled from the outset.

No. You need contacts who are authorised to make decisions in an emergency, such as taking a server offline. Monitoring, triage and technical response are handled by us remotely.

Related work in the same area

Open the full area page
Service GDPR and data protection Data map, permissions, audit logs and a plan for the first 72 hours Service Security policies and documentation A policy, a risk assessment and procedures that people actually follow Service Security solution roll-out Choosing, piloting and deploying tools remotely Service Infrastructure security Perimeter, network segments and safe remote access

See the attack coming instead of finding it afterwards

Tell us your size, systems and the coverage you have in mind. We will propose sources and a scope that fit your business.

Availability
Monday to Friday, 8:00-17:00 Austrian time (CET/CEST), reply within one working day
Meetings
By video on Microsoft Teams or Google Meet

We only use cookies that are technically required: to run the website and to remember the location you picked. There are no advertising or tracking cookies. Details are in the privacy notice.