Businesses Private clients
Get remote help Help
How companies settle invoices SWIFT bank transfer or card Checking that an invoice really came from Apply PDF invoices and related paperwork
Slovenščina English
Send an enquiry
Services
Solutions
Pricing
Courses
Articles
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT support Hand routine IT chores to a remote team and keep your people focused on clients End-to-end IT support One contract and one predictable bill for laptops, servers and Microsoft 365 IT helpdesk Stuck colleagues reach a technician in minutes, not the next morning Service desk Tracked tickets with clear owners, deadlines and a monthly recap 24/7 support Overnight and weekend cover for businesses where downtime is not an option Plans: Start, Business, Premium Prices start at €450 monthly plus VAT, response targets fixed by contract
Service plans and SLAs Pick a 4-hour, 1-hour or 15-minute response and get monthly proof we hit it System administration Patching, identities and servers handled to a timetable, fully documented IT infrastructure Find out what is really holding you back before spending on new hardware Network and telephony Network audits, continuous monitoring and phone calls moved onto Teams Cloud and hostingNew Virtual, dedicated and storage capacity in EU data centres such as Hetzner or OVHcloud Backup and recovery Immutable copies beyond the reach of ransomware, with restore drills on the calendar
GDPR and data protection The paperwork a Slovenian controller needs, from processing records to processor contracts Security policies and documentation Short, readable rules your staff sign and genuinely stick to Security tooling roll-out Selection, deployment and tuning of EDR, mail filters and MFA Infrastructure security Visitors on guest Wi-Fi kept well apart from the finance server Application security Catch weaknesses in in-house code before release day Data leak prevention (DLP) Payroll spreadsheets and client databases stay where they belong Database security Every query against sensitive tables leaves a trace Web application firewall (WAF) Bots and SQL injection filtered out before they touch your checkout Access control and endpoint security Remote lock for mislaid laptops and MFA on every account VPN and encryption Secure connections to company systems whether at home, in a hotel or on a construction site Vulnerability scanning See your exposed weak spots first, ahead of any intruder Antivirus and EDR Behavioural detection catches what signature scanning misses SOC monitoring Round-the-clock log review, with action taken on genuine threats System hardening Unneeded ports and services closed on every Windows and Linux host Safe use of AI Agreed ground rules before client data ends up in ChatGPT or similar tools
Websites and web applications Brochure sites, shops, portals, SEO and upkeep: fourteen services in one area E-commerce and integrations Shop, Amazon, Minimax, Stripe and GLS working from shared stock and order data Custom software Move workflows out of spreadsheets into an application built for them Software testing and QA Bugs caught in testing, not by your buyers
Artificial intelligenceNew Practical AI projects aimed at a measurable business need Data and analytics A single warehouse and consistent figures instead of spreadsheet sprawl IT consulting and audit Impartial advice before you commit budget to a major IT project Digital marketing Find out which campaigns actually pay off
Software and licensing Genuine licences for dev and IT teams, with renewals tracked for you Training Live courses over video, from Microsoft 365 essentials to spotting phishing
Unsure what to tackle first? A brief remote check-up ends with a written list of five priorities Request a review
See all 13 solutions together
NIS2 readiness Risk assessment, incident planning and supplier security for NIS2 and ZInfV-1 GDPR compliance Processing records through to a breach procedure, delivered as a set Remote and hybrid work Protected access and managed laptops for staff outside the office Business continuity A rehearsed plan for the day a key server goes down
Retail and e-commerce Web shop, marketplaces, payments and couriers connected end to end Manufacturing ERP and plant network kept running across every shift Clinics and healthcare Stronger safeguards around patient records in surgeries and private practices Construction Office and site crews working from one current set of drawings Logistics and transport WMS, e-CMR and vehicle tracking available whenever the trucks roll
Small businesses Simple IT at a known monthly price for teams of five to twenty Mid-sized companies Support under an SLA plus regular security work as headcount grows Large enterprises Extra hands and niche expertise to back up your internal IT department Multi-site companies Headquarters and every branch in Slovenia on one IT standard
No match for your situation? Tell us about the company in a couple of lines and we will suggest the right services Ask for advice
Who we are The people behind Apply and why we work only remotely Articles Practical pieces about IT and security Paying us Invoices, SWIFT transfers or payment by card Contact Write via the form or by email, or book a video call
Service · Cybersecurity

Vulnerability scanning

Producing a scan report takes an afternoon. Producing results from it takes discipline, and that is where most efforts stall. Picture a 60-room hotel at Bled that paid for an assessment twelve months ago. The document runs to three hundred items, the majority graded “medium”. Nobody knew which to tackle first, so nobody tackled any. Meanwhile, a remote access appliance guarding the hotel's reservation and front-office system developed a publicly exposed weakness that criminal groups are now abusing, and in the report it looks no different from line 212. For us scanning is a routine, not a project. Perimeter, internal subnets, websites and cloud tenants are revisited on a fixed rhythm. Results are weighed against your setup, and we look past the headline score to ask whether anyone is exploiting the issue in the wild. Anything significant becomes a ticket with a named person and a target date, and is only marked done after a follow-up scan agrees.

Ask about this service See the scope
Every month
internal and external passes, critical assets more often
Ranked
by evidence of exploitation, not CVSS alone
Tickets
every finding has a name and a date attached
Verification
a rescan proves the fix

Scope of the service

Coverage focuses on what an intruder would target. Thick reports that nobody opens are not the goal.

Check the scope with an engineer

External exposure

All public IPs and domains: edge firewall, remote access, mail service and sites. Whatever answers from the internet, along with its software version, is rechecked regularly.

Inside the network

Servers, laptops, switches, printers and NAS devices. Logging in with credentials during the scan gives a much truer view of missing patches and weak configuration.

Web properties

Stale plugins, absent or wrong security headers, admin pages left reachable and forgotten backup archives on websites and online shops.

Cloud tenants

Weak cloud configuration, for example storage open to the public, admins without two-step sign-in and apps granted far too much.

Making sense of results

For every finding we ask three things: can it be reached from the internet, is exploit code circulating, and how much does the business lean on that system? You end up with a brief, prioritised task list.

Follow-through

Tickets go to the responsible colleague or supplier, overdue items trigger a nudge, and nothing is closed until a rescan confirms it.

How the work runs

Round one tends to expose years of accumulated debt. From then on the job is keeping the slate clean.

01

Defining targets

We list addresses, subnets, sites and tenants, and arrange scanning consent and time slots with your hosting and cloud providers.

02

First sweep

A complete pass with analysis. Anything critical is dealt with at once; everything else gets a timetable you can actually meet.

03

Cadence

Monthly passes, plus a focused extra check when SI-CERT or a manufacturer flags a severe flaw.

04

Visibility

Directors get a single monthly page; engineers get a living list of open items. The trend line should keep falling.

What protects you is how fast holes get closed, not how many were found. Three hundred lines on paper defend nothing. Shutting one actively exploited, internet-facing flaw inside a week is worth more than polishing a hundred minor settings, so our yardstick is days to remediation rather than volume of findings.

Your questions answered

It is unlikely. Passes run outside business hours, and delicate kit such as ageing printers, factory controllers or medical devices gets a lighter touch. We agree that list together before scanning starts.

We agree that at the outset. Systems under our management are fixed by us. Where a supplier runs the system, we brief them with the evidence and a suggested remedy, keep chasing, and confirm the fix. Extra effort is billed at €50 per hour plus VAT once you approve an estimate.

No. Scanning is automated, repeated and wide, looking for weaknesses already known to the world. Pen testing is a limited engagement where an expert deliberately tries to break into a specific target using an attacker's mindset. Think of scanning as a regular health check and a pen test as a specialist consultation; you need both.

We do. SI-CERT notices and the security advisories of large vendors are tracked continuously, and if a severe flaw touches something in your estate, the affected systems are checked straight away rather than at the next monthly pass.

More services in this area

Open the area page
Service GDPR and data protection Processing records, processor contracts, safeguards and a ready plan for when a breach happens Service Security policies and documentation A policy, risk register and procedures that match daily reality Service Security tooling roll-out Choosing, trialling and deploying protection remotely Service Infrastructure security Perimeter clean-up, network zoning and controlled outside access

Spot weaknesses before attackers do

Describe what you expose to the internet and give a rough device count. We will come back with a scanning scope and rhythm that fit.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.