Cybersecurity services for businesses
We provide cybersecurity services for businesses: Fortinet and Cisco firewalls, protection for computers and servers (Bitdefender, CrowdStrike) and Microsoft 365 security. We start with a review that shows where your company is most exposed.
Typical reasons to review your security
-
The ISP's router doubles as the firewall
Internet traffic and outside connections pass through unchecked. A proper firewall filters that traffic and secures remote access.
-
Nobody knows where the biggest gaps are
Security measures were added over the years with no plan or documentation. After a review of the firewall, accounts, endpoint protection and backups, you get a list of actions ranked by urgency.
-
A client has sent a security questionnaire
Companies covered by the KSC act, Poland's implementation of NIS2, check how suppliers protect data. We answer the technical side of these questionnaires and close the gaps they reveal.
-
After an attack, work has to resume quickly
Encrypted files or a hijacked account bring the company to a halt. First we isolate the infected devices, then get the company running again and close the gap.
Services
-
Fortinet FortiGate
We select, deploy and maintain FortiGate with VPN and network segmentation, and move rules over from your old firewall.
-
Cisco
We design, supply, configure and maintain Cisco switches, routers, firewalls and Wi-Fi.
-
Microsoft 365 security
We review and secure Microsoft 365. We enable MFA and Conditional Access, protect email and deploy Intune and Defender.
-
Bitdefender
We supply Bitdefender GravityZone licences, deploy protection on workstations and servers and keep watch over alerts.
-
CrowdStrike Falcon
Cloud-based protection for computers and servers that detects attacks and lets you respond. We choose the package and deploy it in your company.
What the level of protection depends on
An office with a few computers and email in Microsoft 365 has different needs from a manufacturing plant with several sites and systems that must run without interruption.
| Layer | What it protects | How we do it |
|---|---|---|
| Network edge | Traffic between the company and the internet, remote access | Fortinet and Cisco firewalls, VPN, segmentation |
| Computers and servers | Malware, ransomware, suspicious activity | Bitdefender and CrowdStrike with a central console |
| Accounts and email | Account takeover, phishing, file leaks | Microsoft 365 security: MFA, Conditional Access, email protection |
| Data | Data loss after a failure or an attack | Backups out of an attacker’s reach and regular test restores |
Our article on threat monitoring and incident response (in Polish) explains how we detect attacks that get past the defences. For a review of the whole infrastructure (servers, network, workstations and licences), see our IT infrastructure audit.
What we do
- Selection, deployment and configuration of Fortinet FortiGate and Cisco next-generation firewalls
- VPN (virtual private network) access for remote staff and secure connections between branches
- Network segmentation: separate segments for servers, workstations, guests and devices
- Bitdefender and CrowdStrike Falcon protection for computers and servers, managed from a central console
- Microsoft 365 security: multi-factor authentication (MFA), Conditional Access and email protection
- Ransomware-resistant backups and tests showing that data can be restored from them
- Threat monitoring in CrowdStrike Falcon, with incidents handled in our Jira ticketing system
- Security audits of infrastructure and Microsoft 365, including the requirements of the KSC act
Who it is for
- Your staff connect remotely and you do not know how well that access is secured
- Computers run free antivirus software, or you are not sure protection is switched on everywhere
- A client, an insurer or the KSC act requires you to document your security measures
- Your company has suffered an attack, a data leak or encrypted files, and you want to prevent the next incident
Security review and actions ranked by urgency
We start by reviewing your current security. You get a report with the risks and the order of work. We improve what you already have first, and propose new hardware only where the old equipment has lost manufacturer support.
- Firewall and remote access configuration
- Administrator accounts and multi-factor authentication
- Backups and a test restore
Threat monitoring and incident response
We monitor threats in CrowdStrike Falcon and handle incidents in our Jira ticketing system. Each alert is checked to see whether it is a false alarm or the start of an attack. In a serious incident, we cut the infected device off from the network, find the cause and get operations back to normal.
- Monitoring in CrowdStrike Falcon
- Incidents handled in our Jira ticketing system
- 24/7 support under an SLA with on-call cover
The technical side of KSC obligations
The amended Polish National Cybersecurity System Act (KSC), which implements the NIS2 Directive, mainly covers medium-sized and large companies in selected sectors, and indirectly their suppliers. We handle the technical part: a security review, the missing safeguards and configuration documentation. Your company's legal classification is best confirmed with a lawyer.
- Inventory of systems, accounts and IT suppliers
- Gaps ranked by risk
- Documentation of the safeguards in place
How we work
-
Security review
We get to know your company, sites and systems. After the review, we point out the biggest gaps.
-
Design and quote
We propose changes that fit the size of your company and your budget. Sometimes better configuration is enough, and sometimes you need new hardware and licences.
-
Deployment
We configure devices and services, move rules over from the old equipment and switch traffic in a maintenance window agreed with you.
-
Handover and documentation
We hand over the configuration documentation and show your staff what has changed, for example how to sign in with MFA.
-
Support after deployment
We update device software, keep track of licence renewals, respond to alerts and review the configuration regularly.
Pricing
We quote every project individually, after discussing its scope and requirements.
- Fortinet firewall deployment (FortiGate)
- Price depends on: number of sites and VPNs, network segmentation, migration of rules from the old device.
- Computer and server protection (Bitdefender)
- Price depends on: number of workstations and servers, licence term, central console deployment.
- CrowdStrike Falcon (EDR/XDR)
- Price depends on: number of workstations, package (EDR / XDR).
- Supply and configuration of Cisco network devices
- Price depends on: number of sites and devices, scope of configuration, integration with your existing network.
- Microsoft 365 security (configuration)
- Price depends on: number of users, MFA and Conditional Access, Intune / Defender.
- Monitoring and incident response
- Price depends on: number of systems, response hours (business days or 24/7).
- Security audit
- Price depends on: scope (infrastructure, Microsoft 365, procedures, KSC requirements), number of sites.
Experience and partners
- users supported by the Conetso Group helpdesk
- about 1,600
- Our partners include Fortinet and Cisco. We select and supply devices through the official channel and service them under the manufacturer's warranty and support.
- We deploy computer and server protection on Bitdefender GravityZone and CrowdStrike Falcon. The choice depends on the size of the company and on who will handle the alerts.
-
Fortinet Authorized Reseller -
Cisco Partner
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
Security and regulations
-
Obligations of essential and important entities
The amended KSC act has applied since 3 April 2026. Essential and important entities implement an information security management system and report significant incidents: an early warning within 24 hours and a notification within 72 hours. The head of the entity is responsible for this, even when an outside company carries out the work.
Polish Act of 23 January 2026 amending the National Cybersecurity System Act (Journal of Laws 2026, item 252) Legal status as of
-
Supply chain security
Entities covered by the act manage the risks associated with suppliers of hardware, software and IT services. They write security requirements into contracts, such as an obligation to report incidents. That is why questionnaires and contract annexes also reach smaller companies that the act does not cover directly.
Polish Act of 23 January 2026 amending the National Cybersecurity System Act (Journal of Laws 2026, item 252) Legal status as of
Frequently asked questions
Where should we start with securing the company?
With a security review. The greatest risks usually come from email without multi-factor authentication, unsecured remote access and untested backups. We fix these three areas first.
Is antivirus enough?
No. In a small company, endpoint protection with a central console is a sensible start. You also need a firewall, secure remote access, MFA for email and backups out of an attacker's reach.
Does the KSC act apply to my company?
That depends on your sector and size. The act mainly covers medium-sized and large companies in the sectors listed in Annexes 1 and 2, such as energy, transport, healthcare, manufacturing and digital services. Some entities are covered regardless of size. It is best to confirm your classification with a lawyer.
Can you help with the requirements of the KSC act?
Yes, with the technical part. The scope depends on whether your company is covered as an essential or important entity, or supplies such an entity.
Can you secure the equipment we already have?
Yes. Often it is enough to update the software and improve the configuration of your current firewall or Microsoft 365. We propose new hardware only when the old equipment has lost manufacturer support or no longer gives the protection you need.
See also
-
Managed IT services for businesses
Maintenance of servers, networks, backups and licences, plus monitoring. We take over all of your IT or selected areas.
-
Business network design and installation
We design, build and document networks: cabling, rack cabinets, switches, Wi-Fi and firewalls.
-
IT infrastructure and systems audit for businesses
A review of servers, networks, backups, accounts and licences, ending with a report that ranks actions by urgency.
-
Conetso Healthcare
Networks in hospitals and clinics
Network security in clinics, diagnostic centres and hospitals.
From our blog
Bitdefender vs CrowdStrike: protecting computers and servers
Bitdefender vs CrowdStrike: we compare GravityZone and Falcon. We explain when endpoint protection is enough and when a business needs EDR, XDR or MDR.