Cybersecurity

The company had strict compliance requirements and had just been through a successful phishing attempt that exposed credentials. There was no widespread MFA and no visibility over endpoints.

We deployed Bitdefender GravityZone EDR on all workstations, mandatory MFA through Microsoft Entra, hardening according to CIS Benchmarks and a SIEM to correlate events. We ran a continuous programme of phishing simulations and employee training.

The security culture changed visibly: employees now report suspicious emails instead of clicking on them. The combination of EDR, MFA and continuous training moved the organisation from a reactive posture to a prepared one, demonstrable to auditors and partners, without slowing down day-to-day work.

A ransomware attack had partially encrypted the main file server. Operations were down, and the pressure to pay the ransom was high.

We immediately isolated the affected systems to stop propagation, restored from an immutable backup (protected against deletion) and ran an investigation to identify the entry vector. We then closed the breach and applied full hardening and segmentation.

The incident turned from a potential catastrophe into a well-managed lesson. With segmentation, immutable backups and permanent monitoring, any re-infection would be isolated quickly, and the tested response plan gives the team and management the confidence that they know exactly what to do at the next alarm.

The platform processed payments and customer data but had never been security-tested and had no monitoring. The risk of a breach and reputational damage was high.

We carried out an application penetration test using the OWASP methodology, prioritised and remediated the critical vulnerabilities together with the development team, put a WAF in front and enabled continuous monitoring with alerting.

The platform now processes payments and customer data with a much smaller attack surface and under continuous supervision. Security testing became part of the development cycle, so every new feature is checked before it reaches production, not after a possible breach.