Businesses Private clients
Get remote help Help
How companies settle invoices SWIFT bank transfer or card Checking that an invoice really came from Apply PDF invoices and related paperwork
Slovenščina English
Send an enquiry
Services
Solutions
Pricing
Courses
Articles
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT support Hand routine IT chores to a remote team and keep your people focused on clients End-to-end IT support One contract and one predictable bill for laptops, servers and Microsoft 365 IT helpdesk Stuck colleagues reach a technician in minutes, not the next morning Service desk Tracked tickets with clear owners, deadlines and a monthly recap 24/7 support Overnight and weekend cover for businesses where downtime is not an option Plans: Start, Business, Premium Prices start at €450 monthly plus VAT, response targets fixed by contract
Service plans and SLAs Pick a 4-hour, 1-hour or 15-minute response and get monthly proof we hit it System administration Patching, identities and servers handled to a timetable, fully documented IT infrastructure Find out what is really holding you back before spending on new hardware Network and telephony Network audits, continuous monitoring and phone calls moved onto Teams Cloud and hostingNew Virtual, dedicated and storage capacity in EU data centres such as Hetzner or OVHcloud Backup and recovery Immutable copies beyond the reach of ransomware, with restore drills on the calendar
GDPR and data protection The paperwork a Slovenian controller needs, from processing records to processor contracts Security policies and documentation Short, readable rules your staff sign and genuinely stick to Security tooling roll-out Selection, deployment and tuning of EDR, mail filters and MFA Infrastructure security Visitors on guest Wi-Fi kept well apart from the finance server Application security Catch weaknesses in in-house code before release day Data leak prevention (DLP) Payroll spreadsheets and client databases stay where they belong Database security Every query against sensitive tables leaves a trace Web application firewall (WAF) Bots and SQL injection filtered out before they touch your checkout Access control and endpoint security Remote lock for mislaid laptops and MFA on every account VPN and encryption Secure connections to company systems whether at home, in a hotel or on a construction site Vulnerability scanning See your exposed weak spots first, ahead of any intruder Antivirus and EDR Behavioural detection catches what signature scanning misses SOC monitoring Round-the-clock log review, with action taken on genuine threats System hardening Unneeded ports and services closed on every Windows and Linux host Safe use of AI Agreed ground rules before client data ends up in ChatGPT or similar tools
Websites and web applications Brochure sites, shops, portals, SEO and upkeep: fourteen services in one area E-commerce and integrations Shop, Amazon, Minimax, Stripe and GLS working from shared stock and order data Custom software Move workflows out of spreadsheets into an application built for them Software testing and QA Bugs caught in testing, not by your buyers
Artificial intelligenceNew Practical AI projects aimed at a measurable business need Data and analytics A single warehouse and consistent figures instead of spreadsheet sprawl IT consulting and audit Impartial advice before you commit budget to a major IT project Digital marketing Find out which campaigns actually pay off
Software and licensing Genuine licences for dev and IT teams, with renewals tracked for you Training Live courses over video, from Microsoft 365 essentials to spotting phishing
Unsure what to tackle first? A brief remote check-up ends with a written list of five priorities Request a review
See all 13 solutions together
NIS2 readiness Risk assessment, incident planning and supplier security for NIS2 and ZInfV-1 GDPR compliance Processing records through to a breach procedure, delivered as a set Remote and hybrid work Protected access and managed laptops for staff outside the office Business continuity A rehearsed plan for the day a key server goes down
Retail and e-commerce Web shop, marketplaces, payments and couriers connected end to end Manufacturing ERP and plant network kept running across every shift Clinics and healthcare Stronger safeguards around patient records in surgeries and private practices Construction Office and site crews working from one current set of drawings Logistics and transport WMS, e-CMR and vehicle tracking available whenever the trucks roll
Small businesses Simple IT at a known monthly price for teams of five to twenty Mid-sized companies Support under an SLA plus regular security work as headcount grows Large enterprises Extra hands and niche expertise to back up your internal IT department Multi-site companies Headquarters and every branch in Slovenia on one IT standard
No match for your situation? Tell us about the company in a couple of lines and we will suggest the right services Ask for advice
Who we are The people behind Apply and why we work only remotely Articles Practical pieces about IT and security Paying us Invoices, SWIFT transfers or payment by card Contact Write via the form or by email, or book a video call
Service · Cybersecurity

Infrastructure security

Ransomware crews rarely need sophisticated tricks. Many simply walk through an opening that has existed for years: remote desktop published straight to the internet, a VPN box missing its patches, a camera recorder still using the password printed in its manual. Once in, they typically land on one undivided network where finance PCs, factory controllers, the visitor Wi-Fi and the servers all talk freely. Think of a distribution warehouse near Koper where scanners, the stock system, office PCs and cameras all sit on one subnet and the software supplier reaches the WMS server via an open NAT rule. A single weak spot can stop every shipment. Our infrastructure work cuts those links. We start by examining everything you expose externally, as an intruder would. Next the network is divided by purpose, traffic between zones is restricted to what is necessary, and access from outside is moved to authenticated channels that keep a record. No new boxes and no site visits are needed.

Ask about this service See the scope
Perimeter
examined through an intruder's eyes
VLANs
one each for staff, plant, visitors and devices
RDP closed
outside entry only after authentication
Undo route
prepared before any change

Scope of the service

We configure firewalls and switches that the manufacturer still patches. Replacement is suggested only for models out of support; your own people or a local supplier fit the unit, and we take care of the setup online.

Check the scope with an engineer

Perimeter assessment

Every public IP, domain and subdomain is checked for listening services: abandoned test machines, management consoles, legacy FTP. Each one is shut, locked down or given a documented reason to stay.

Tidying firewall rules

Years of “just for now” entries, forwarded ports of unknown origin and allow-everything lines are reviewed. Anything kept is labelled with its purpose and the person answerable for it.

Zoning the network

Separate VLANs are created for desks, shop-floor or stock equipment, servers, cameras, printers and visitors. Cross-zone traffic is permitted only where a real need exists, and only on specific ports.

Controlled outside access

Published RDP and forwarded ports disappear, replaced by VPN with a second sign-in factor or by identity-aware access. Vendor sessions become individual, time-boxed and recorded.

Wi-Fi

Enterprise authentication with WPA2 or WPA3 for employees, or at minimum strong, regularly rotated keys; isolated clients and capped bandwidth for visitors. Busy spaces such as a hotel lobby or surgery waiting area get their own design.

Admin consoles

Management pages of network and CCTV equipment can be reached only from a dedicated admin network. Factory passwords are replaced and idle services turned off.

How the work runs

Altering a network can interrupt business, so the work is staged and every stage can be reversed.

01

Mapping

Current diagram, equipment list and an outside-in scan. Where no diagram exists we build one online, and cable tracing is done by your colleague with us watching on video.

02

Target layout

A clear matrix of permitted zone-to-zone traffic and ports. After your sign-off, the sequence and change windows are fixed.

03

Staged changes

Riskiest gaps get shut on day one; zones then move across in turn. Configurations are saved beforehand and changes are made out of hours.

04

Confirmation

We rescan from outside, test cross-zone access and deliver a current diagram, rule register and list of administrative access.

In a single undivided network, one infected laptop can take the entire company with it. Zoning does not keep intruders out, but it slows their movement, makes them easier to notice and limits what they can reach. Keeping office ransomware away from the factory floor or the warehouse is frequently what separates a bad afternoon from a week-long shutdown.

Your questions answered

Yes. Controller and machine PC settings remain as they are; we only isolate their network and filter what reaches it. If the equipment maker services machines remotely, that connection gets its own logged route. Cut-over happens between shifts or during planned downtime.

A personal VPN account with two-step verification, or a remote session that expires automatically, limited to the one server and port the vendor needs. The forwarded port is then closed, with timing agreed directly with the vendor.

Generally yes, provided the maker still releases security fixes and the unit handles your throughput. Hardware past its support date is a hazard because it can no longer be patched, and our mapping report will say so.

For configuration, completely. Where hands are needed, for instance to move a patch lead, someone on your side does it while we watch on video. Changes are sequenced so a mistake can never cut off our management access.

More services in this area

Open the area page
Service GDPR and data protection Processing records, processor contracts, safeguards and a ready plan for when a breach happens Service Security policies and documentation A policy, risk register and procedures that match daily reality Service Security tooling roll-out Choosing, trialling and deploying protection remotely Service Application security Least-privilege roles, per-integration accounts and safe handling of API keys

See what your network reveals to the internet

Tell us how many locations you run, what firewall protects them and which people connect in from elsewhere. We will propose an initial perimeter check.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.