Businesses Private clients
Remote assistance Help
Paying as a business Bank transfer via SWIFT, or card Is this invoice genuinely ours? PDF, ebInterface and ZUGFeRD
Deutsch English
Send an enquiry
Services
Solutions
Pricing
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT services Your IT team without the office desk: devices, logins and servers kept running from afar All-inclusive IT support One flat monthly price covering PCs, Microsoft 365 and your servers IT helpdesk Staff report an issue via mail, portal or a Teams chat and get screen-share help fast Service desk One front door for all requests, priorities tied to the SLA, a monthly summary for the boss Round-the-clock support Engineers on standby overnight, at weekends and over public holidays Start, Business and Premium plans Monthly care starting at €890 plus VAT
Service plans and SLAs Contractual reaction times of 4 hours, 1 hour or 15 minutes System administration Logins, virtual hosts, shared drives and infected machines, all fixed through an encrypted session IT infrastructure A candid stocktake, quicker machines and desktops streamed from the cloud Network and telephony Firewall and WLAN audited, connections watched, calls handled inside Microsoft Teams Cloud and hostingNew Servers, shop hosting, S3 storage and mailboxes hosted in Austria or elsewhere in the EU Backup and recovery Copies kept off the premises, separated from the company network, restored on a schedule to prove they work
GDPR and data protection Processing register, AVV contracts and safeguards aligned with GDPR and Austria's DSG Security policies and documentation Written house rules you can hand to an auditor or use for NIS2 groundwork Security solution roll-out We pick the product, install it and tune the rule set Infrastructure security Network zones, a cleaned-up rulebase and servers with nothing needlessly exposed Application security Reviewed code and deployments that stay free of new gaps Data loss prevention (DLP) Keeps sensitive files from leaving via mail attachments, flash drives or file shares Database security Tight rights, encrypted tables and an audit trail of every query Web application firewall (WAF) Bad traffic and bots stopped before reaching your site, Shopware store or API Access control and endpoint protection MFA, Intune policies and laptops you control centrally VPN and encryption Safe tunnels for home working and BitLocker on every notebook Vulnerability scans Regular scanning with fixes prioritised by severity Antivirus and EDR Malicious activity spotted, the compromised device quarantined immediately SOC monitoring Every alert reviewed by a human, clear-cut attacks contained automatically at night too System hardening Factory defaults locked down using CIS benchmarks and BSI recommendations Safe use of AI Ground rules for what may be typed into Copilot or ChatGPT
Websites and web applications 14 services spanning one-page sites to B2B portals, with SEO, care plans and post-hack repair E-commerce and integrations Webshop wired up to BMD or RZL, Amazon, eps and Austrian Post Custom software Line-of-business tools, apps and APIs that follow your processes, not the other way round Software testing and QA Defects and slowdowns caught while they are still cheap to fix
Artificial intelligenceNew Practical AI work, from spotting the right opportunity to staff training under the AI Act Data and analytics Tidy master records, a single reporting base and invoices read in automatically IT advisory and audit A second opinion on your IT plans and on how the pieces connect Online marketing Leads followed from the ad click to the signed offer, tracked in a CRM
Software and licensing Official subscriptions for IDEs, monitoring suites and sysadmin tools Training Instructor-led online sessions for teams or individuals
No idea which step comes first? We review your setup over a remote session and email you a prioritised action list Request a review
Browse all 13 solutions
NIS2 readiness Check whether you fall in scope, then set up risk handling, incident reporting and proof GDPR compliance Paperwork and technical controls in order well before the DSB comes knocking Remote and hybrid work Employees reach files and programs safely wherever they happen to be working Downtime prevention Proven backups, monitoring and an emergency playbook prepared in advance
Retail and e-commerce Shopware or WooCommerce joined up with marketplaces, eps and couriers Manufacturing ERP, servers and plant network monitored so the shop floor keeps running Medical practices and healthcare Ordination software, ELGA and e-card stable, with health data locked down Construction Plans, BIM files and AVA data synced to tablets on site Logistics and transport WMS, carrier links and dispatch that survives an outage
Small businesses A well-run Microsoft 365 and help on hand, no IT hire needed Mid-sized companies Infrastructure and security under a signed service agreement Large enterprises Assigned engineers, fast reaction and reporting to your CIO Multi-site companies Identical IT at every branch, administered from one place
Your case looks different? Describe it in a few lines, and we assemble only the pieces that matter to you Send an enquiry
About us The people behind Apply and our remote-only way of working Payment Invoices, electronic formats and due dates Contact Mailboxes, our web form, plus Teams or Meet calls
Service · IT security

Vulnerability scans

Launching a vulnerability scan takes minutes. An hour later the tool produces a report with several hundred entries, colour-coded and sorted by score. In many companies nothing happens next, because nobody knows where to begin and half the entries concern servers looked after by the software partner. A few months on, the next report arrives listing the same issues. Our approach differs: the scan is the smallest part of the job. What matters is judging which weakness can actually be exploited in your environment, deciding who is responsible for fixing it, and having someone chase it until it is truly closed. A flaw in an internet-facing VPN gateway for which attack tools already circulate is more urgent than twenty medium findings on an internal test box. Warnings from CERT.at about actively exploited vulnerabilities feed into that judgement, just as vendor advisories do.

Send an enquiry Inclusions overview
Monthly
internal and external, critical systems more often
Priority
by exploitability, not just by score
A ticket per finding
with an owner and a deadline
Rescan
as proof the fix worked

Everything this covers

We scan what attackers find interesting and skip reports nobody reads.

Settle the details with an engineer

External scan

Every public IP address and domain: firewall, VPN, mail server, website, web shop, customer portal. This is where hours count when a new flaw becomes public.

Internal scan

Servers, workstations, network gear, printers and NAS devices on the company network, with authenticated checks for more accurate results, plus agents on laptops that rarely visit the office.

Web scans

Websites and shops checked for outdated plugins, missing security headers, exposed admin areas and known flaws in WordPress, Shopware or Magento.

Cloud configuration

Microsoft 365, Azure or AWS reviewed for risky settings such as public storage, admins without multi-factor or overly broad permissions.

Rating and ranking

Each finding is assessed for your environment: reachable or not, are exploits available, which data is at stake. The outcome is a few clear tasks instead of an endless list.

Follow-up

Findings become tickets, are passed to whoever owns the system and are rescanned. Once a month you get a brief overview of open items and the trend.

Our working method

The first run usually uncovers the biggest legacy problems. After that the aim is to keep things clean for good.

01

Agree the scope

A list of addresses, networks, websites and cloud tenants, coordination with hosts and software partners, scan windows outside core hours.

02

First scan and clean-up

A full pass with ratings. Critical items go straight into remediation; typically these are missing updates and forgotten systems.

03

Routine operation

Monthly scans, plus a prompt targeted extra scan whenever CERT.at or a vendor issues a critical warning.

04

Reporting

A short monthly summary for management and a technical list for the people doing the work. On request, also as evidence for a customer or insurer.

A report with 400 findings is not a security measure; it is something to file. Your business only becomes safer once the five genuinely dangerous holes are closed. So we measure success not by how many scans run, but by how long critical findings stay open.

Frequently asked questions

Normally not. We scan outside core hours and treat fragile devices such as old printers or production controllers gently with adjusted settings, or leave them out on purpose.

A vulnerability scan is broad and automated, looking for known weaknesses on a regular and comparatively inexpensive basis. A penetration test goes deep: specialists deliberately try to chain flaws together and exploit them. Each complements the other.

We settle that beforehand. For systems we manage, we do it ourselves. For systems run by software partners or hosts, we pass on the finding with a recommendation and keep chasing.

NIS2 obliges entities in scope to manage risk, and handling vulnerabilities is part of that. The directive does not prescribe particular tools, but regular scans with documented remediation are an obvious and easily evidenced way to meet it.

Related work in the same area

Open the full area page
Service GDPR and data protection Data map, permissions, audit logs and a plan for the first 72 hours Service Security policies and documentation A policy, a risk assessment and procedures that people actually follow Service Security solution roll-out Choosing, piloting and deploying tools remotely Service Infrastructure security Perimeter, network segments and safe remote access

Know which weaknesses really matter

Give us a rough idea of what should be scanned. We will suggest scope and frequency and tell you what the first run would focus on.

Availability
Monday to Friday, 8:00-17:00 Austrian time (CET/CEST), reply within one working day
Meetings
By video on Microsoft Teams or Google Meet

We only use cookies that are technically required: to run the website and to remember the location you picked. There are no advertising or tracking cookies. Details are in the privacy notice.