Service · Cyber security

Infrastructure protection

The aim is simple: one compromised PC must not open the door to everything else. A flat network where the bookkeeper's laptop can talk directly to every server explains many ransomware cases in which a company goes dark overnight. The Danish Centre for Cyber Security (CFCS) rates the threat of cybercrime against Danish businesses as very high.

Send an enquiry See the scope

Zones

instead of one flat net

Perimeter

rules in and out

Remote access

behind MFA

Events

collected and watched

What the service covers

We work from the outside in: first the edge facing the internet, then the internal split, and finally servers and workstations.

Talk it through with us

Perimeter

Firewall rules for inbound and outbound traffic: what may leave, what may enter and from which addresses.

Segmentation

Servers, clients, guest Wi-Fi, printers, cameras and production kit each in their own VLAN, with only the traffic that is required between them.

Remote access

Remote desktop exposed to the internet is replaced by a VPN or a gateway with MFA and conditional access.

Servers

Patching, disabling services nobody uses and admin access only through dedicated accounts.

Network kit

Factory passwords on switches, printers and cameras are changed, and management interfaces are fenced off from the user network.

Monitoring

Firewall and server logs are gathered centrally, so unusual activity raises an alert.

How we deliver it

We always begin with a survey, and it nearly always uncovers a forgotten entry point, often one reachable from the internet.

Survey

Network diagram, open ports and a list of remote entry points. For many firms this is their first complete picture.

Urgent fixes

Open ports are closed, default passwords changed and unused services switched off.

Zoning

The network is split in stages so work never stops. If cables need moving or equipment mounting, your local electrician or IT supplier does it following our instructions.

Verification

We scan from outside and inside and present the outcome as a before-and-after report.

Default passwords on network equipment survive the longest. Everyone remembers the PCs, yet the switch in the comms cabinet and the camera by the gate often still use the password printed in the manual. From a switch you can see the whole network, and a camera can become the way in from outside.

Common questions

What is visible from the internet. A list of your public IP addresses and open ports takes about an hour to compile and almost always contains a couple of items that should be closed at once.

Not in a smaller company. Your IT lead can handle the work with outside support. A dedicated role makes sense when NIS2 or customer contracts impose formal duties, or when the estate grows considerably.

Yes. Firewalls, switches and servers are configured over secure remote access. If hardware must be swapped or a cable pulled, your local supplier does the physical part while our engineer guides and configures.

By repeating the scan and comparing it with the first report. Progress should be measurable: open ports, shared accounts and unsegmented devices, before and after.

Related services

View the whole area

Service GDPR and personal data security Access, logging and encryption for personal data Service Security policies and documentation Policies and procedures people can actually follow Service Security solution deployment Selecting, piloting and rolling out security tools Service Application security Roles in business systems and integration accounts

Have your infrastructure checked

We look at what is exposed and how the network is built inside. You get a list of what to close first.

Email
office@apply.dk

Coverage
All of Denmark, delivered remotely

I agree that Apply may handle my details as set out in the privacy policy