Security is a full-time job – we take it on

So you can focus on your business, we take care of the protection, monitoring and recovery of your systems.

What you get with every service

Server, web, database – we run the operations

With every service you book, the security-relevant work runs automatically in the background.

Server

Up to date, hardened and under watch – we take the maintenance off your hands.

  • Malware & ransomware detection: checks files as they are written and flags anything suspicious.
  • Access control & lockout protection – only authorised access, brute-force attempts are locked out automatically.
  • Central logging of all system and sign-in events, evaluated centrally.
  • Security updates are applied regularly and automatically.

Web services

Reachable over an encrypted connection, monitored and able to run with failover.

  • Upstream access protection with encryption enforced throughout.
  • All requests logged and evaluated centrally for attack patterns.
  • Detection & alerting when access patterns look suspicious.
  • Operation across multiple instances possible – resilience and load balancing.

Protection at the access and transport level – no content-level filtering of the web content.

Databases

Protected, monitored and backed up with encryption – recoverable down to the exact moment.

  • Access protection with dedicated credentials, isolated on the network, encrypted internally.
  • Monitoring of access and load, with alerting when something looks off.
  • Point-in-time recovery – backed up with encryption, recovery tested.
  • High availability with failover available – depending on your plan.
Sources → Evaluation → Detection → Security team Server Firewall Sign-in Application Central evaluation Automatic detection continuous unusual pattern Alert automatic reported & reviewed Security team reviews & responds
Overview & alerting

We read the logs so you don't have to

Events from all your systems come together in one central place. Suspicious patterns – such as brute-force attempts or network scans – are detected automatically, around the clock and trigger an alert.

The alert is reviewed by our security team – so we spot incidents early and respond in a targeted way.

We handle this for you: the constant watching and evaluating – you don't have to read any logs.

Internet → Protective filter → legitimate traffic only Internet Protective filter with attack detection malicious – turned away legitimate only Your services
Firewall

A firewall guards the path to your services

All traffic first passes through a central protective filter that separates legitimate from malicious traffic – designed for resilience and with built-in attack detection.

Automated scans and brute-force attempts are detected early, simple attacks are filtered out and anything suspicious is reviewed – before it reaches you.

We take care of this: the filtering at the network edge – suspicious traffic is detected before it reaches your services.

Backed up daily · tested recovery Applications Databases Server backed up daily Separate hardware separate copy Recovery: back to a verified state now selected state For databases: down to the exact moment (point-in-time)
Backup & recovery

If something is lost, we bring it back

We back up your data automatically every day and keep it separate from the production systems on our own, dedicated hardware – already tested successfully for the real case, not just set up.

For databases we go back even further – down to the exact moment (point-in-time).

This runs automatically with us: backing up, keeping it separate and practising the restore – tested.

A password alone isn't enough · second factor required Stolen password turned away alone Password Second factor Access granted Encrypted data internally too
Encryption & access

Why a password alone isn't enough

Passwords get guessed, stolen or captured by phishing. That's why we require a second factor for every access – so a stolen password on its own isn't enough.

And this applies to every service we manage: traffic is encrypted throughout – outward-facing and also internally between our servers.

This is on us: enforcing the second factor, keeping credentials safe and maintaining encryption across every service.

Our strongest argument · data location & sovereignty

Your data stays in your hands

We run everything on our own hardware in Germany (Hamburg) – not with a non-European provider. That gives you two clear commitments.

EU law only

Your data is processed solely under European data protection law (GDPR) – a clear legal basis, no foreign jurisdictions. That's something you don't have to secure yourself.

You stay in control

Your data resides exclusively on our own infrastructure and is never passed on to third parties. Access is limited to you and — strictly as agreed — us as your operator. No one else.

We take this worry off your hands: location and access – on our own hardware in Germany, under EU law, with no third-party access.

No obligation & personal

Let us take this work off your plate

In a free Cloud Check we go through these points together and show you in concrete terms what is already covered for you today – and which tasks we can take off your hands.