Security, Handled
Long-term protection for your business, without building an internal security team.
Security gaps in SMEs are invisible
Most businesses don't manage cybersecurity continuously, and issues go unnoticed until they become incidents.
The Problem: No Visibility
Many small businesses operate without clear visibility on what is happening inside their systems. Security issues, misconfigurations, or exposed services can remain unnoticed for long periods, and risks are often only discovered after an incident or disruption.
In practice, most SMEs cannot easily answer basic questions such as which systems are exposed, what has been accessed, or whether unusual activity has occurred recently. Security becomes reactive rather than controlled.
This lack of visibility is not just a technical limitation, but an operational gap: without continuous monitoring of systems and logs, threats can persist unnoticed for weeks or even months.
Our solution
1. Continuous Monitoring
We continuously monitor your systems to detect vulnerabilities, misconfigurations, and unusual activity before they escalate into incidents.
This provides ongoing visibility into your security posture without requiring internal expertise or additional workload. Instead of discovering issues after disruption, risks are identified early and surfaced in a structured way.
Security becomes something that is continuously observed rather than periodically checked.
2. Incident Detection and Response
When suspicious or critical activity is detected, it is analyzed and handled based on severity. This ensures that urgent issues are addressed quickly, while lower-risk events are documented and communicated clearly.
The goal is to reduce impact, limit exposure, and ensure that security events are not left unresolved or unclear.
Instead of reacting after damage, incidents are managed as they occur.
3. Documentation and Traceability
Security activities are structured, documented, and traceable to support Swiss data protection requirements (nFADP).
This helps ensure that security practices are not only applied, but also traceable and auditable when needed. Compliance becomes a natural outcome of continuous security operations rather than a separate project.
The objective is to reduce uncertainty around regulatory expectations while maintaining operational simplicity.
Why This Is Different
Most SMEs rely on one of three models:
- No active cybersecurity management: security is not actively managed. There is no continuous monitoring, and issues are usually only discovered after an incident, alert, or disruption.
- General IT support only: cybersecurity is indirectly handled by general IT providers or internal IT support, whose focus is typically system availability, maintenance, and user support rather than continuous security monitoring.
- Full-time internal hiring: Building an internal security function is expensive, difficult to justify for smaller companies, and can create continuity risks when key employees leave.
- Temporary or freelance support: Occasionally, companies rely on freelancers or one-off consultants for audits or incident handling. While useful for specific tasks, this does not provide continuous monitoring or ongoing security oversight.
This creates a gap where security is either absent or over-engineered for the size of the business.
Our approach fills that gap by providing a dedicated, continuous security function that is external, lightweight, and focused on real operational risks rather than infrastructure ownership.
Trust And Expertise
Security experience from environments where it is treated as critical infrastructure.
I am a software and cybersecurity engineer based in Switzerland, working in environments where security is treated as a prerequisite rather than an optional layer.
In these environments, monitoring, detection, and incident response are part of daily operations. This experience directly shapes how I approach security for SMEs: structured, continuous, and operational.
I work in French and English, enabling direct communication with Swiss businesses without technical or organizational friction.
The goal is to bring this level of operational discipline into a simplified external service for companies that need security handled, but do not operate with dedicated security teams.
You are protected in three steps
We take over security operations with minimal disruption to your business. No action from your side required.
Initial assessment
We analyze your infrastructure, identify exposure points, and understand your current setup.
Deployment
We deploy monitoring and security components across your systems and endpoints without disrupting operations.
Continuous protection
We continuously monitor, detect, and respond to security events while only notifying you when action is required.
One Plan
A fully managed cybersecurity service for SMEs. We handle monitoring, detection, and incident response so you don't need to manage security internally.
Fixed at 600 CHF / month with a 12-month contract. This replaces fragmented tools and ad-hoc support with continuous operational security coverage.
Additional work outside the scope can be requested at 100 CHF/hour, with direct access to security expertise.
Included
- • Initial security assessment of your infrastructure
- • Deployment of monitoring system and endpoint agents
- • Continuous monitoring of systems and logs
- • Vulnerability detection and exposure analysis
- • Incident detection and response
- • Security event triage and prioritization
- • Monthly security report
- • External attack surface visibility
- • Operational security support
Additional work
- • Infrastructure changes and system modifications
- • Firewall and access control updates
- • Security hardening of servers and services
- • Review of new tools, vendors, or architectures
- • Incident investigation and post-analysis
- • Deployment validation and security review
100 CHF/hour for additional requests
Let's Talk About Your Security
Tell us about your situation. We will review it and come back with clear next steps.
No commitment required — this is simply an initial assessment of your security setup.