CRITICAL INFRA
Loading critical CVEs…
ALL EXPLOITED
Loading…
← Back to home

All 16 enterprise services

From firewall to Kubernetes, from daily backups to 24/7 SOC. Each with transparent pricing, strict SLA and complete documentation.

EXPERT

Linux Servers (Debian-first)

Linux servers that run for years without you touching them. Debian Server as standard, complete hardening, 24/7 monitoring, automatic backup. You focus on business.

  • Debian (preferred), Ubuntu Server, RHEL, Rocky, Alma
  • iptables / nftables advanced ruleset
  • OpenVPN server + client, IPsec, WireGuard
  • GeoIP filtering, IP reputation lists, CrowdSec
  • Fail2ban, port knocking, CIS hardening, Lynis
  • Ansible playbooks, Bash/Python automation
  • HA cluster (Pacemaker, Corosync, DRBD)
  • Kernel tuning, performance optimization
  • LVM, software RAID, ZFS on Linux
  • systemd services, journald, log shipping
EXPERT

Firewall & Network Security

We secure your network perimeter with Fortinet enterprise or open-source solutions. 20+ firewalls in production, zero breach in 5 years.

  • FortiGate (all series), FortiAnalyzer, FortiManager
  • OpenVPN, IPsec, WireGuard, SSL VPN site-to-site
  • Linux iptables & nftables advanced ruleset
  • GeoIP filtering on FortiGate + Linux + nginx
  • IP reputation lists (CrowdSec, AbuseIPDB, Spamhaus)
  • Fail2ban, port knocking, basic anti-DDoS
  • IDS/IPS Suricata/Snort, web filtering, DNS filtering
  • SD-WAN, multi-WAN failover, QoS traffic shaping
  • pfSense / OPNsense on custom appliance
  • FortiSwitch, FortiAP integration with FortiGate
EXPERT

VMware vCenter Virtualization

VMware vCenter clusters with real HA, vSAN hyperconverged, NSX-T microsegmentation. Post-Broadcom migrations to Proxmox with 60-90% savings.

  • vSphere 7/8, vCenter design + multi-site deploy
  • HA + DRS + vMotion + Storage vMotion
  • P2V, V2V, cross-version, cross-vendor migrations
  • vSAN (hyperconverged), NFS, iSCSI, Fibre Channel
  • NSX-T microsegmentation, distributed firewall
  • Site Recovery Manager (SRM) DR orchestration
  • vSphere Lifecycle Manager (vLCM), Update Manager
  • Veeam B&R backup + cross-site replication
  • Horizon VDI basic, vRealize Operations
  • Capacity planning, performance tuning, zero-downtime upgrade
EXPERT

Hyper-V Virtualization

Hyper-V Failover Cluster or Storage Spaces Direct hyperconverged. Clean P2V migrations, cross-site replication, native Veeam integration.

  • Hyper-V Server (standalone & Core)
  • Failover Cluster Manager for HA
  • Storage Spaces Direct (S2D) hyperconverged
  • Live Migration, Quick Migration, Shared Nothing
  • Hyper-V Replica cross-site DR
  • Veeam B&R for Hyper-V
  • ESXi ↔ Hyper-V bidirectional migration
  • PowerShell DSC automation on Windows
  • SCVMM (System Center Virtual Machine Manager)
  • Nested virtualization, GPU passthrough
EXPERT

Proxmox VE Virtualization

Proxmox VE 8.x cluster with Ceph: same functionality as VMware, no expensive licenses. Staged VMware migration without extensive downtime.

  • Proxmox VE 8.x multi-node cluster
  • Ceph distributed hyperconverged storage
  • Local ZFS with async replication
  • HA Manager with fencing, watchdog
  • LXC containers + KVM VMs in same cluster
  • Live migration, snapshot, backup PBS
  • Proxmox Backup Server (PBS) with deduplication
  • ESXi → Proxmox migration with OVF Tool
  • REST API + Ansible/Terraform integration
  • Cost: zero license, community or enterprise support
EXPERT

Kubernetes & microservices

Production-grade K8s cluster: self-hosted or managed (EKS/AKS/GKE). GitOps with ArgoCD, secrets in Vault, complete observability, strict RBAC.

  • Self-hosted K8s cluster (kubeadm, RKE2, k3s for edge)
  • Managed Kubernetes: EKS, AKS, GKE setup and migration
  • Ingress controllers: Nginx, Traefik, HAProxy
  • Service mesh: Istio, Linkerd for mTLS observability
  • GitOps with ArgoCD / Flux for automated CD
  • Custom Helm charts for client applications
  • Cert-manager for automated SSL (Let's Encrypt)
  • External Secrets Operator (Vault, AWS SM)
  • Velero cross-cluster backup & restore
  • Strict RBAC, NetworkPolicy, Pod Security Standards
EXPERT

Docker & container deployment

Containerize your legacy applications, deploy with Docker Compose or Swarm. Image CVE scanning, private registry, complete CI/CD pipeline.

  • Dockerizing legacy apps (PHP, .NET, Java, Python)
  • Multi-stage builds optimized for minimal size
  • Docker Compose stacks for dev/staging/prod
  • Docker Swarm for simple orchestration (3-10 nodes)
  • Private container registry (Harbor, Nexus, Gitea)
  • Image vulnerability scanning (Trivy, Clair)
  • Centralized logging (Fluentd, Loki driver)
  • Container metrics monitoring (cAdvisor, Prometheus)
  • CI/CD pipeline (GitLab CI, Jenkins, GitHub Actions)
  • Docker volume backup + restore strategy
EXPERT

Mikrotik

Mikrotik RouterOS from SOHO to carrier-grade: BGP, OSPF, MPLS, RADIUS hotspot, automated scripting. CHR Cloud Hosted Router on ESXi/Hyper-V.

  • RB1100/CCR routers, CRS switches
  • CHR (Cloud Hosted Router) on ESXi/Hyper-V
  • BGP, OSPF, MPLS, VRF, VPLS
  • QoS, queue trees, per-IP traffic shaping
  • Hotspot, captive portal, RADIUS, User Manager
  • RouterOS scripting for automation
  • WireGuard, IPsec, OpenVPN tunnels
  • EoIP, GRE, L2TP/IPsec tunnels
  • Bonding, bridging with STP/RSTP
  • Automated backup + disaster restore scenarios
EXPERT

Networking

Multi-vendor switching (Cisco, Dell, Ubiquiti, HPE Aruba) + WiFi 6/6E enterprise. Predictive site survey, RADIUS 802.1X, SNMP/NetFlow monitoring.

  • Cisco Catalyst & Nexus switches (CLI configuration)
  • Dell PowerSwitch / OS10 switches + Force10 legacy
  • Ubiquiti UniFi PoE switches (self-hosted controller)
  • HPE Aruba, Juniper EX switches (basic)
  • VLAN 802.1Q, trunking, LAG/LACP, MSTP/RSTP
  • Layer 3 routing, OSPF, static, policy-based routing
  • Wireless Ubiquiti UniFi AP WiFi 5/6/6E indoor/outdoor
  • Site survey + predictive heatmap, RADIUS 802.1X
  • Network monitoring SNMP, NetFlow, sFlow
  • Network documentation, IPAM (NetBox, phpIPAM), diagrams
EXPERT

Web · Mail · Proxy

Web hosting + mail server + reverse proxy self-hosted: complete control, zero vendor lock-in, GDPR-compliant, predictable cost. No billing surprises.

  • Nginx + Apache + PHP-FPM 7.4/8.x multi-version
  • MySQL / MariaDB / PostgreSQL backends
  • HAProxy L4/L7 load balancer with keepalived HA
  • Nginx reverse proxy + WebSocket + WAF ModSecurity
  • Varnish cache + Traefik for containers
  • Automatic Let's Encrypt SSL (Certbot, acme.sh)
  • IP ACL + GeoIP filtering + rate limiting + fail2ban
  • Postfix MTA + Dovecot IMAP with virtual mailboxes
  • Rspamd + ClamAV + DKIM / SPF / DMARC / MTA-STS
  • Exchange/Zimbra/cPanel migrations + Roundcube/SOGo webmail
EXPERT

Backup & Disaster Recovery

Backup that works at restore. 3-2-1-1-0 strategy: ransomware-proof immutable backups, monthly restore tests, RTO/RPO documented per application.

  • Veeam B&R Enterprise (VMware + Hyper-V)
  • Proxmox Backup Server with deduplication
  • Cross-site replication via IPsec/WireGuard
  • Bacula / BorgBackup / Restic on native Linux
  • Monthly automated restore tests
  • RTO/RPO documented per application
  • DR runbook + quarterly tabletop exercises
  • Immutable backups with hardened repository
  • S3/MinIO object storage as secondary tier
  • Database backups (PostgreSQL, MySQL, MSSQL, MongoDB)
EXPERT

Infrastructure monitoring & SOC

Complete infrastructure monitoring stack: Nagios, Check_MK, Zabbix, Grafana, Prometheus, Loki.

  • Nagios Core / XI for classic infrastructure
  • Check_MK Raw + Tribe29 enterprise
  • Zabbix 7.x with custom per-platform templates
  • Grafana dashboards + Prometheus exporters
  • Loki / Graylog / ELK for log aggregation
  • SNMP polling + traps on network devices
  • Synthetic checks (HTTP, TCP, DNS, latency)
  • Alerting Telegram, Slack, email, PagerDuty
  • On-call rotation with escalation matrix
  • 24/7 SOC, incident response < 15 min
EXPERT

IDS/IPS & NetFlow monitoring

We detect attacks before they cause harm. Suricata + Snort inline IPS, Wazuh SIEM, CrowdSec auto-blocking, pcap capture for forensics.

  • Suricata IDS/IPS in inline or passive IDS mode
  • Snort 3 with SO rules + Talos community
  • Emerging Threats + custom rules per client
  • NetFlow v9 / IPFIX / sFlow collection & analysis
  • nfdump / ntopng for top talkers, anomalies
  • Zeek (Bro) for advanced protocol analysis
  • Wazuh SIEM correlation of IDS alerts with host events
  • CrowdSec community blocklist automatic update
  • Grafana dashboard with real-time critical alerts
  • Forensic pcap capture for incident investigations
EXPERT

Custom software

We build applications that actually deliver value: BI dashboards, ERP integrations, AI chatbots, ETL automation. Working on your code, handed over clean.

  • Database connectivity
  • REST / SOAP / GraphQL API integrations + webhooks
  • Custom Excel reports (xlsx, formulas, pivot)
  • PDF export with custom layout (markdown → PDF)
  • CSV / JSON export for data sync
  • BI dashboards (Streamlit, Grafana, Metabase)
  • AI chatbot with LLM (Claude, OpenAI)
  • ETL pipelines (Python, Airflow, cron)
  • Multi-page web apps (Streamlit, Flask, FastAPI)
  • Python / Bash / PowerShell automation
EXPERT

Consulting & Audit

Our audit doesn't just look at diagrams, it looks at bills and SLAs. Concrete roadmap with calculated ROI, prioritized by real business impact.

  • Full technical audit (servers, network, security)
  • Internal penetration testing (Linux + AD)
  • Right-sizing, license cost optimization
  • Modernization roadmap with ROI prioritization
  • Complete documentation: diagrams, runbooks, wiki
  • Internal IT team training
  • GDPR, ISO 27001, NIS2 compliance
  • Neutral vendor selection & PoC
  • Multi-year capacity planning + CAPEX budgeting
  • Hybrid cloud migration (AWS, Azure, GCP basics)
EXPERT

Enterprise database administration

DBA for PostgreSQL, MySQL, MSSQL, Oracle, MongoDB. Backup, replication, performance tuning, security audit — for critical databases that don't fail.

  • PostgreSQL 17 with streaming + logical replication
  • MySQL / MariaDB Galera Cluster or MHA
  • Microsoft SQL Server Always On Availability Groups
  • Oracle Database admin (basic RAC, Data Guard)
  • MongoDB Replica Set + Sharding
  • Redis HA with Sentinel or Cluster mode
  • Logical + physical backup (pgBackRest, Veeam SQL Aware)
  • Performance tuning: query optimization, indexing
  • Security audit: encryption at-rest, TLS, row-level security
  • Cross-platform migrations (e.g. MSSQL → PostgreSQL)
Let's discuss your project →

We respond within 4 business hours max · SOC 24/7

Privacy Policy & Cookies

Cyber Immunity SRL (Reg. 42071740, Simion Barnutiu St. no. 3, Alba Iulia) complies with GDPR (EU Reg. 2016/679).

Data processed: only what you enter in the contact form (name, email, phone, message) — used solely to respond.

Cookies used:

Your rights: access, rectification, deletion, portability. Contact: office@cymmunity.ro

Hosting & data: everything self-hosted in Romania. Zero third-party services for personal data.