Businesses Private clients
Get remote help Help
How companies settle invoices SWIFT bank transfer or card Checking that an invoice really came from Apply PDF invoices and related paperwork
Slovenščina English
Send an enquiry
Services
Solutions
Pricing
Courses
Articles
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT support Hand routine IT chores to a remote team and keep your people focused on clients End-to-end IT support One contract and one predictable bill for laptops, servers and Microsoft 365 IT helpdesk Stuck colleagues reach a technician in minutes, not the next morning Service desk Tracked tickets with clear owners, deadlines and a monthly recap 24/7 support Overnight and weekend cover for businesses where downtime is not an option Plans: Start, Business, Premium Prices start at €450 monthly plus VAT, response targets fixed by contract
Service plans and SLAs Pick a 4-hour, 1-hour or 15-minute response and get monthly proof we hit it System administration Patching, identities and servers handled to a timetable, fully documented IT infrastructure Find out what is really holding you back before spending on new hardware Network and telephony Network audits, continuous monitoring and phone calls moved onto Teams Cloud and hostingNew Virtual, dedicated and storage capacity in EU data centres such as Hetzner or OVHcloud Backup and recovery Immutable copies beyond the reach of ransomware, with restore drills on the calendar
GDPR and data protection The paperwork a Slovenian controller needs, from processing records to processor contracts Security policies and documentation Short, readable rules your staff sign and genuinely stick to Security tooling roll-out Selection, deployment and tuning of EDR, mail filters and MFA Infrastructure security Visitors on guest Wi-Fi kept well apart from the finance server Application security Catch weaknesses in in-house code before release day Data leak prevention (DLP) Payroll spreadsheets and client databases stay where they belong Database security Every query against sensitive tables leaves a trace Web application firewall (WAF) Bots and SQL injection filtered out before they touch your checkout Access control and endpoint security Remote lock for mislaid laptops and MFA on every account VPN and encryption Secure connections to company systems whether at home, in a hotel or on a construction site Vulnerability scanning See your exposed weak spots first, ahead of any intruder Antivirus and EDR Behavioural detection catches what signature scanning misses SOC monitoring Round-the-clock log review, with action taken on genuine threats System hardening Unneeded ports and services closed on every Windows and Linux host Safe use of AI Agreed ground rules before client data ends up in ChatGPT or similar tools
Websites and web applications Brochure sites, shops, portals, SEO and upkeep: fourteen services in one area E-commerce and integrations Shop, Amazon, Minimax, Stripe and GLS working from shared stock and order data Custom software Move workflows out of spreadsheets into an application built for them Software testing and QA Bugs caught in testing, not by your buyers
Artificial intelligenceNew Practical AI projects aimed at a measurable business need Data and analytics A single warehouse and consistent figures instead of spreadsheet sprawl IT consulting and audit Impartial advice before you commit budget to a major IT project Digital marketing Find out which campaigns actually pay off
Software and licensing Genuine licences for dev and IT teams, with renewals tracked for you Training Live courses over video, from Microsoft 365 essentials to spotting phishing
Unsure what to tackle first? A brief remote check-up ends with a written list of five priorities Request a review
See all 13 solutions together
NIS2 readiness Risk assessment, incident planning and supplier security for NIS2 and ZInfV-1 GDPR compliance Processing records through to a breach procedure, delivered as a set Remote and hybrid work Protected access and managed laptops for staff outside the office Business continuity A rehearsed plan for the day a key server goes down
Retail and e-commerce Web shop, marketplaces, payments and couriers connected end to end Manufacturing ERP and plant network kept running across every shift Clinics and healthcare Stronger safeguards around patient records in surgeries and private practices Construction Office and site crews working from one current set of drawings Logistics and transport WMS, e-CMR and vehicle tracking available whenever the trucks roll
Small businesses Simple IT at a known monthly price for teams of five to twenty Mid-sized companies Support under an SLA plus regular security work as headcount grows Large enterprises Extra hands and niche expertise to back up your internal IT department Multi-site companies Headquarters and every branch in Slovenia on one IT standard
No match for your situation? Tell us about the company in a couple of lines and we will suggest the right services Ask for advice
Who we are The people behind Apply and why we work only remotely Articles Practical pieces about IT and security Paying us Invoices, SWIFT transfers or payment by card Contact Write via the form or by email, or book a video call
Service · Websites and web applications

Website recovery after an attack

A website compromise rarely announces itself with a dramatic message on the home page. More often, phone visitors land on a dodgy page, Google shows a warning in search results, or the host takes the site offline for sending spam. Imagine a hotel in Bled discovering that its booking form leads to a foreign site selling pills. Every hour means lost bookings and the question of whether guest data was stolen. Recovery is not just cleaning files. You have to find how the attacker got in, or they will be back within a week.

Ask about this service See the scope
First steps the same day
during working hours, remotely
Point of entry
we find how the attacker got in
Google
warnings removed through Search Console
72 hours
to notify the Information Commissioner if personal data is involved

Scope of the service

We work in an order that limits the damage and keeps the evidence. Hastily deleting everything is often a mistake.

Check the scope with an engineer

Preserving the state

A copy of the infected site, database and server logs before anything is changed. Without it, nobody can later establish what happened or whether data was taken.

Containing the damage

Where needed, the site is temporarily replaced with a notice, passwords for admins, database, FTP and hosting are changed and unknown users are revoked.

Finding the way in

A review of logs, vulnerable plugins, stolen passwords and file changes. The usual culprits are outdated plugins, weak passwords without multi-factor login and forgotten copies of the site left on the server.

Cleaning or rebuilding

A clean version is restored from a verified backup or the source code, and database content is checked for injected links and scripts.

Clearing warnings

A check in Google Search Console, a review request and a check of whether your domain sits on spam blocklists. We also help with communication with your host.

Report and recommendations

A written report on what happened, what we did and what has to change so it does not recur. It also helps you assess whether the breach must be reported.

How the work runs

Once you contact us, during working hours we start the same day. The first goal is to stop the damage, the second to find the cause.

01

Initial assessment

Over a video call or email we take a description of the problem and the access details, judge the scope and propose first actions.

02

Preserve and contain

We preserve the state, change passwords and, if necessary, take the site down temporarily so visitors are not put at risk.

03

Clean and harden

We remove the infection, close the point of entry, update the system and plugins and switch on multi-factor login.

04

Verify and report

We watch the site for several days, clear search engine warnings and deliver a report with recommendations.

If the site held personal data, the clock is running. Under GDPR a controller generally has to report a personal data breach to the Information Commissioner within 72 hours of becoming aware of it, unless it is unlikely to pose a risk to individuals. We prepare the technical report quickly; the decision to report is yours, taken with your lawyer or data protection officer. Incidents can also be reported to SI-CERT.

Your questions answered

Rarely. If you do not know how the attacker got in, the same hole is still open in the backup, and the backup itself may already be infected. We do use backups, but only after review and with the weakness closed.

Not always. If it sends visitors to dangerous pages or steals data, we replace it temporarily with a notice. If the problem is hidden spam links, we can clean it while it stays up.

Once the site is clean we submit a review request in Search Console. Google usually completes the review within a few days, though we cannot guarantee an exact time.

With regular updates, multi-factor login, fewer plugins, off-server backups and monitoring of file changes. All of this is part of our website care service.

More services in this area

Open the area page
Service WordPress websites A bespoke block theme, a short plugin list and every licence held in your company's name Service Shopify and other hosted platforms Shopify, Wix or PrestaShop chosen from your own figures, then set up properly Service Brochure site and product catalogue A few pages, a catalogue with a request-a-quote button instead of a basket, easy editing Service Corporate website Separate routes for customers, candidates, suppliers and press, several languages and a clear editorial flow

What is happening to your site?

Describe what you noticed, since when and which system the site runs on. During working hours we get back to you as soon as possible, normally the same day.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.