Business Individuals Public sector
Remote support Help
Pay an invoice BLIK, card or instant transfer Is this invoice ours? Invoices and KSeF
Polski English
Get a quote
Services
Solutions
Pricing
Courses
Company
Contact
Get a quote
See the full catalogue of 83
IT outsourcing An external IT team that works remotely and knows your systems inside out Managed IT support Your laptops, servers and Microsoft 365 in our hands at one fixed price per month IT helpdesk Staff raise issues by email, through the portal or in a Teams chat Service desk One queue for every request, priorities set by the SLA, reporting each month 24/7 IT support Night, weekend and holiday cover for systems that must stay up Start, Business and Premium plans Managed IT from PLN 1,900/month excl. VAT
Support plans and SLA Contracted reaction times of 15 min, 1 h or 4 h Systems administration Servers, user accounts, hypervisors and sluggish or infected PCs, all handled remotely IT infrastructure An honest review of what you run, speed fixes and desktops delivered from the cloud Networking and VoIP Wi-Fi and LAN checks, 24/7 link monitoring, calls through Teams or a VoIP provider Cloud and hostingNew Virtual and physical servers in EU data centres, shop hosting, S3 storage and company mail Backup and restore Copies that are tested by actually restoring them, stored locally and in the cloud
GDPR and personal data protection Registers, processor agreements and the technical measures behind them Security policies and documentation Written rules prepared with audits and NIS2 in mind Security tooling deployment We choose the tools, deploy them and fine-tune the rules Infrastructure security Split networks, strict firewall policy, hardened servers Application security Reviewing code and securing how releases ship Data leak prevention (DLP) Control over which files leave the organisation Database security Who can read what, encrypted at rest, with every access logged Web application firewall (WAF) Filters hostile traffic before it hits your site, shop or API Access control and endpoint security Intune-managed devices with MFA enforced VPN and encryption Encrypted laptop drives and protected remote connections Vulnerability scanning Regular scans with a to-do list ordered by severity Antivirus and EDR Threats detected, the infected device isolated SOC monitoring A security team triaging every alert, day and night System hardening Defaults tightened in line with CIS benchmarks Secure use of AI Clear policies on what staff may paste into Copilot or ChatGPT
Websites and web apps Company sites, shops, portals and B2B platforms, plus UX, SEO, ongoing care and rescue after a hack E-commerce and integrations Orders flowing between your shop, Allegro, the accounting package, BLIK and couriers Bitrix24 and intranet A shared workspace for CRM, tasks and documents, configured and licensed Bespoke software Web and mobile applications built to order, integrations, migrations and teams on demand Software testing and QA Manual and automated checks, load tests, usability sessions and pentests before go-live
Artificial intelligenceNew From a first pilot to production models, with GPU capacity and staff workshops Data and analytics One reliable source of figures, dashboards and invoices read automatically IT consulting and audit An outside view of your roadmap and of how your systems fit together Digital marketing Where leads come from, where they get lost and how the CRM should track them
Software and licences Licences for IDEs, monitoring, remote access and admin tooling Training Courses for whole teams or individual coaching sessions online
Not sure what you need? We review your IT remotely and hand you a prioritised fix list Get the free review
All 14 solutions
Data in the EU Mailboxes, files and apps kept in EU-based data centres GDPR compliance Documents and controls ready before UODO knocks Remote and hybrid work Staff reach company files safely from any location Downtime prevention Tested backups, alerting and a recovery plan on paper
Retail and e-commerce Web shop, Allegro, BLIK and InPost wired into one flow Manufacturing Servers, network and ERP looked after so IT does not stop the line Healthcare and clinics Electronic records, e-prescriptions and patient data kept safe Construction Plans and BIM models available on site, on any device Logistics and transport WMS, carrier integrations and business continuity Public institutions KRI, digital accessibility, NIS2 and e-invoicing through PEF
Small businesses Microsoft 365 set up properly, helpdesk included Mid-sized companies SLA-backed care for servers, network and security Large enterprises Named engineers, short reaction times, regular reports Multi-branch companies Every branch runs on one IT standard
Your case is different? Tell us about it and we will assemble a mix of services around it Describe your case
About us The team and our remote-first approach Payments Invoices, KSeF, BLIK and payment terms Contact Email, the enquiry form and calls on Teams or Google Meet
Service · Cybersecurity

Web application firewall (WAF)

An online shop is reachable by anyone, day and night, and automated scanners discover a new one soon after launch. A web application firewall screens out routine attacks before they touch the code, whether the shop is built on WooCommerce, PrestaShop or bespoke software. The skill lies in doing so without turning away customers, payment gateway callbacks or the BaseLinker connection.

Send an enquiry Scope of work
Learning
before blocking
OWASP
Top 10 as a baseline
Virtual patches
for known flaws
Report
summary of blocks

Included in this service

Careful coding still matters, but a WAF buys breathing space: today a rule shields the flaw, and the code is corrected in the next release.

Talk the scope through with an engineer

Attack filtering

Known techniques are stopped at the edge: SQL injection, cross-site scripting, path traversal and probing for hidden admin pages.

Login protection

Rate limiting on wp-admin, the PrestaShop back office and customer accounts, and protection of the password reset flow from abuse.

Bot management

Search engines and the price comparison services you partner with are let through. Price scrapers, card-testing bots and stock-hoarding scripts are kept out.

Virtual patching

A plugin vulnerability is neutralised by a rule before its author releases a fix, something that happens with popular WooCommerce extensions more often than anyone would like.

Integration exceptions

Callbacks from Przelewy24, PayU or Tpay, courier webhooks and marketplace connections get narrowly defined exceptions, so orders never hang on “awaiting payment”.

Reporting

A periodic overview of blocked requests, their origin and the rule responsible, written so the shop owner can follow it too.

How we work together

Most trouble with a new WAF appears right at the start, so we never begin in blocking mode.

01

Analysis

Platform, forms, customer accounts, payment methods and integrations: a complete list of everything that legitimately talks to the shop.

02

Learning

The firewall watches without blocking and builds a profile of genuine traffic, ideally spanning a weekend and one promotion.

03

Tuning

False positives are removed. A live shop always has some, usually in product search and the admin area.

04

Enforcement

Protection is switched on, alerting configured and events reviewed on a schedule, with extra attention before Black Friday and Christmas.

Never launch a WAF for the first time a week before a big sale. Traffic is unusual then, and each false positive is an abandoned basket. A firewall introduced well ahead has already learnt the shop, so at the peak it turns away bots rather than buyers.

Questions and answers

Usually not. Many cloud WAF services work alongside a CDN that serves images and scripts from servers closer to the customer, so pages may even load faster. The delay added by inspecting requests is normally imperceptible to shoppers.

On subscription platforms such as Shoper or IdoSell, the provider runs the infrastructure and its terms describe the protection included, so a separate WAF is normally unnecessary. We then concentrate on what remains yours: administrator accounts, MFA and access granted to third-party apps.

After the learning and rule tuning period, whose length depends on your traffic. Individual rules for obvious attacks, for example against a publicised plugin flaw, can be enabled immediately.

They see a page with an event reference, and we find the rule responsible in the logs and adjust it. After tuning such cases are rare, and the report shows whether they are creeping up.

Neighbouring services

Go to the area overview
Service GDPR and personal data protection Who sees personal records, what is logged, what is encrypted Service Security policies and documentation Rules and procedures that survive real working days Service Security tooling deployment Choosing, piloting and rolling out tools remotely Service Infrastructure security Perimeter, network zones and safe remote access

Shield your shop with a WAF

Tell us which platform powers your shop or portal and what it connects to. We will recommend a WAF type and a roll-out plan.

Hours
Mon-Fri 8:00-18:00 CET, reply within one working day
Meetings
Online via Teams or Google Meet

We set strictly necessary cookies only: they keep the site running and remember the city you chose. Nothing here is used for advertising or tracking. More in our privacy policy.