Plenty of firms believe their security budget is already spent wisely: a premium Microsoft 365 plan, an antivirus subscription that renews itself, a firewall with a web filter bolted on. Dig in and you frequently find features never enabled, protections set merely to observe, or policies applied to a pilot group nobody remembers creating. Sales calls keep coming regardless, each promising a cure-all. Imagine a furniture exporter in the Savinja valley employing thirty people. It pays for Business Premium, has never activated Defender for Business, leaves mail filtering at factory settings, and its bookkeepers regularly receive convincing fakes claiming a supplier has switched bank accounts. Buying another product would be the wrong reflex here; switching on what is already owned is the right one. So we first identify the threats that genuinely apply to you and what your existing subscriptions are capable of. Spending comes later, if at all. Each control is validated on a handful of users before it spreads, and our job is finished when it is actively defending you, not when a dashboard shows a green tick.
Only controls that address your risks make the cut; impressive-sounding extras do not. In businesses of 10 to 200 users, these components come up most:
We list what your Microsoft 365 plan (Business Premium, E3, E5), Google Workspace edition or firewall licence includes, and what is actually enabled. Frequently a planned purchase is unnecessary because the capability is sitting there unused.
Every account gets a second sign-in factor, and Entra ID policies restrict sessions coming from odd locations or unmanaged hardware.
Impersonation filtering, DMARC backed by SPF and DKIM for your domain, plus detonation of suspicious links and files. Bogus delivery notices, counterfeit invoices and quotes carrying a swapped IBAN are a daily nuisance for Slovenian SMEs.
An EDR agent, typically Microsoft Defender in its Business or Endpoint edition or an equivalent, administered through Intune or its own console so every laptop and server follows one rule set.
A shared password manager with departmental vaults, so passwords for eDavki, internet banking, AJPES and supplier portals no longer live in spreadsheets or browser memory.
Brief simulated phishing and bite-sized lessons based on lures your industry really sees: a fake FURS reminder, a parcel “held” pending a customs fee, a bogus request to renew a Microsoft 365 password.
A fixed routine for every deployment keeps the working week free of shocks.
Which attacks fit your profile, what software is already present, which subscriptions you hold. The output ranks actions by impact, effort and price.
Where a capability is genuinely absent, we weigh a few candidate products against your criteria and justify a single recommendation, with no preferred brand.
A small group runs the control in observation first, then in enforcement. False alarms are collected and exceptions tuned while the rest of the company is unaffected.
Remote installation in stages, a functional check, and short notes explaining each setting, why it was chosen and whom alerts go to.
Protection that only watches is not protection. It generates unread reports and misplaced confidence. Switching from “log” to “prevent” is where deployments stall, since that is the moment exceptions, old software and habits appear. Our engineers see that transition through alongside you.
Rarely. That subscription already contains Defender for Business, Intune and Conditional Access. Buying another engine pays off only for a niche Defender cannot cover, such as an operating system outside its support list. We confirm this before money is spent.
Technically it is quick; getting everyone enrolled takes around two weeks. Preparation eats most of that time: checking company phones, carving out exceptions for printers and service accounts, writing a simple guide. Confident users self-enrol, everyone else gets a short video session with us.
No. We do not sell hardware or visit sites to install it. When a replacement is due, we suggest a model, you purchase it locally, a colleague or nearby technician connects it, and we set it up remotely.
The trial is designed to catch that. Should something slip through, contact helpme@apply.si or your agreed channel. Rather than switching protection off wholesale, a tightly scoped exception is created and documented.
Share which security products and subscriptions you have. We will point out what is lying unused and where to begin.
Enquiry received
An engineer will write back no later than the following working day. Faults that leave your staff unable to work are always looked at first.
No town by that name here. Check the letters, or settle for the nearest larger place. Our engineers work only over the internet, so Kočevje and Koper get precisely the same treatment.
