Businesses Private clients
Get remote help Help
How companies settle invoices SWIFT bank transfer or card Checking that an invoice really came from Apply PDF invoices and related paperwork
Slovenščina English
Send an enquiry
Services
Solutions
Pricing
Courses
Articles
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT support Hand routine IT chores to a remote team and keep your people focused on clients End-to-end IT support One contract and one predictable bill for laptops, servers and Microsoft 365 IT helpdesk Stuck colleagues reach a technician in minutes, not the next morning Service desk Tracked tickets with clear owners, deadlines and a monthly recap 24/7 support Overnight and weekend cover for businesses where downtime is not an option Plans: Start, Business, Premium Prices start at €450 monthly plus VAT, response targets fixed by contract
Service plans and SLAs Pick a 4-hour, 1-hour or 15-minute response and get monthly proof we hit it System administration Patching, identities and servers handled to a timetable, fully documented IT infrastructure Find out what is really holding you back before spending on new hardware Network and telephony Network audits, continuous monitoring and phone calls moved onto Teams Cloud and hostingNew Virtual, dedicated and storage capacity in EU data centres such as Hetzner or OVHcloud Backup and recovery Immutable copies beyond the reach of ransomware, with restore drills on the calendar
GDPR and data protection The paperwork a Slovenian controller needs, from processing records to processor contracts Security policies and documentation Short, readable rules your staff sign and genuinely stick to Security tooling roll-out Selection, deployment and tuning of EDR, mail filters and MFA Infrastructure security Visitors on guest Wi-Fi kept well apart from the finance server Application security Catch weaknesses in in-house code before release day Data leak prevention (DLP) Payroll spreadsheets and client databases stay where they belong Database security Every query against sensitive tables leaves a trace Web application firewall (WAF) Bots and SQL injection filtered out before they touch your checkout Access control and endpoint security Remote lock for mislaid laptops and MFA on every account VPN and encryption Secure connections to company systems whether at home, in a hotel or on a construction site Vulnerability scanning See your exposed weak spots first, ahead of any intruder Antivirus and EDR Behavioural detection catches what signature scanning misses SOC monitoring Round-the-clock log review, with action taken on genuine threats System hardening Unneeded ports and services closed on every Windows and Linux host Safe use of AI Agreed ground rules before client data ends up in ChatGPT or similar tools
Websites and web applications Brochure sites, shops, portals, SEO and upkeep: fourteen services in one area E-commerce and integrations Shop, Amazon, Minimax, Stripe and GLS working from shared stock and order data Custom software Move workflows out of spreadsheets into an application built for them Software testing and QA Bugs caught in testing, not by your buyers
Artificial intelligenceNew Practical AI projects aimed at a measurable business need Data and analytics A single warehouse and consistent figures instead of spreadsheet sprawl IT consulting and audit Impartial advice before you commit budget to a major IT project Digital marketing Find out which campaigns actually pay off
Software and licensing Genuine licences for dev and IT teams, with renewals tracked for you Training Live courses over video, from Microsoft 365 essentials to spotting phishing
Unsure what to tackle first? A brief remote check-up ends with a written list of five priorities Request a review
See all 13 solutions together
NIS2 readiness Risk assessment, incident planning and supplier security for NIS2 and ZInfV-1 GDPR compliance Processing records through to a breach procedure, delivered as a set Remote and hybrid work Protected access and managed laptops for staff outside the office Business continuity A rehearsed plan for the day a key server goes down
Retail and e-commerce Web shop, marketplaces, payments and couriers connected end to end Manufacturing ERP and plant network kept running across every shift Clinics and healthcare Stronger safeguards around patient records in surgeries and private practices Construction Office and site crews working from one current set of drawings Logistics and transport WMS, e-CMR and vehicle tracking available whenever the trucks roll
Small businesses Simple IT at a known monthly price for teams of five to twenty Mid-sized companies Support under an SLA plus regular security work as headcount grows Large enterprises Extra hands and niche expertise to back up your internal IT department Multi-site companies Headquarters and every branch in Slovenia on one IT standard
No match for your situation? Tell us about the company in a couple of lines and we will suggest the right services Ask for advice
Who we are The people behind Apply and why we work only remotely Articles Practical pieces about IT and security Paying us Invoices, SWIFT transfers or payment by card Contact Write via the form or by email, or book a video call
Service · Cybersecurity

System hardening

Out of the box, most systems are configured for convenience. Ancient protocols remain enabled in case something still needs them, every user is allowed to hand a random app access to their mail, and the copier's admin page sits online guarded by “admin/admin”. Individually these are minor. Collectively they are exactly the foothold an intruder hopes to find. Think of a structural engineering practice in Ljubljana: an obsolete file-sharing dialect is still enabled on its server, anyone in the firm can let an unknown app read their Microsoft 365 inbox, and macros fire happily in attachments fetched from the web. Not one of these issues calls for a purchase. They are all switches. Hardening is the systematic job of reviewing those switches against respected references, mainly CIS guides and Microsoft baselines. Flipping a value is easy; doing so without upsetting anyone's work is the skill. Hence our routine: measure, pilot, roll out, and write down every deliberate exception along with the reason.

Ask about this service See the scope
Zero new licences
it is all configuration
CIS Benchmarks
plus Microsoft baselines as the reference
Exceptions
each one written up with a reason
Drift detection
stops settings creeping back

Scope of the service

We tighten things a layer at a time, from the cloud tenant all the way down to the office printer, measuring before and testing after each change.

Check the scope with an engineer

Microsoft 365 tenant

Admin approval required before users grant consent to third-party apps, old sign-in protocols retired, mail auto-forwarding to outside addresses stopped, Teams external and guest options reviewed.

Windows PCs

Microsoft baselines delivered by Intune or Group Policy, internet-sourced macros blocked, PowerShell constrained, local admin accounts brought under control.

Windows Server and AD

SMBv1 and NTLMv1 retired, needless services such as print spooling on domain controllers disabled, administrative tiers introduced, password rules modernised.

Linux hosts

SSH by key alone, direct root access disabled, host-level filtering, unattended security updates and surplus packages stripped out.

Network kit and printers

Default logins replaced, unencrypted admin access removed, firmware brought current. Copiers, storage boxes and CCTV recorders are frequent weak points.

Watching for drift

Automated checks run regularly to confirm hardened values are still in force, so a patch or a hurried tweak that undoes one does not go unnoticed.

How the work runs

Hardening done in a rush breaks things. Small, measurable increments avoid that.

01

Measuring the gap

Systems are scanned against the chosen baseline. You see each setting's present state, the target state and what changing it might affect.

02

Deciding together

Together we choose what changes and where an exemption is justified, for example an older line-of-business app that still relies on a legacy protocol.

03

Gradual deployment

Lab machines and early adopters go first, everyone else afterwards. Everything is applied by policy, so any step can be undone.

04

Proof and handover

A fresh scan, plus the register of justified exceptions. Ongoing drift detection is available as a regular service.

The least expensive security upgrade is the one hiding in your existing settings. No extra product, dashboard or subscription is required, only care and consistency. A surprising number of breaches pivot on one default that ought to have been switched off long ago.

Your questions answered

They come from the Center for Internet Security, a non-profit, and are drafted with input from practitioners worldwide to cover operating systems, cloud services and network devices. They cost nothing to download and are commonly cited as a practical, setting-by-setting reference, ISO 27001 projects included.

Not at all. Certain items will not fit your environment and some would upset older software. We keep the ones that are worthwhile and record a sentence or two on why the rest were skipped. Auditors view a reasoned exception far more kindly than an unexplained hole.

It stays switched on solely for the server and workstations that use that program and goes off across the rest of the network. The exception is logged as a risk, with a reminder to modernise or replace the software.

Undoing a policy-driven change takes minutes, and the pilot usually catches problems beforehand. Should one reach users anyway, contact helpme@apply.si; we reverse the change, diagnose it and put a precise fix in place.

More services in this area

Open the area page
Service GDPR and data protection Processing records, processor contracts, safeguards and a ready plan for when a breach happens Service Security policies and documentation A policy, risk register and procedures that match daily reality Service Security tooling roll-out Choosing, trialling and deploying protection remotely Service Infrastructure security Perimeter clean-up, network zoning and controlled outside access

Replace unsafe defaults with sound configuration

Give us an idea of your systems and their numbers. We will recommend which layer is worth hardening first.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.