Cyber Immunity in Timisoara
Servicii IT enterprise in Timisoara: deplasari on-site din Alba Iulia, monitoring 24/7 remote, response < 15 min pentru urgente SOC. Lucram pentru companii cu infrastructura critica care cer SLA strict.
Servicii enterprise in Timisoara
🐧 Servere Linux
Administrare servere Linux Debian (preferat), Ubuntu Server, RHEL, Rocky, Alma. Hardening CIS, audit Lynis, monitoring 24/7, backup zilnic automatizat.
- iptables/nftables ruleset avansat
- OpenVPN, IPsec, WireGuard server + client
- GeoIP filtering, IP reputation lists, CrowdSec
- HA cluster (Pacemaker, Corosync, DRBD)
- Kernel tuning, ZFS, LVM, performance optimization
- systemd, journald, log shipping centralizat
- Ansible playbooks, Bash automation
- Backup cu Bacula, BorgBackup, Restic
- Monitoring cu Prometheus node_exporter
- Hardening complet CIS Benchmark + Lynis audit
🛡️ Firewall & Securitate
Securizam perimetrul retelei cu Fortinet enterprise, pfSense, OPNsense, Mikrotik sau Linux iptables/nftables hardened. 20+ firewall-uri in productie, zero breach.
- FortiGate toate seriile + FortiAnalyzer + FortiManager
- OpenVPN, IPsec, WireGuard, SSL VPN site-to-site
- GeoIP + IP reputation (CrowdSec, Spamhaus)
- IDS/IPS Suricata + Snort inline
- SD-WAN, multi-WAN failover, traffic shaping QoS
- Migrare firewall legacy → FortiGate
- Inlocuire UTM scump cu OPNsense + Suricata
- SD-WAN multi-branch cu zero-touch deploy
- VPN site-to-site IPsec cu HA
- Hardening Linux firewall + auto-block CrowdSec
💠 VMware vCenter
Clustere VMware vCenter cu HA real, vSAN hyperconverged, NSX-T microsegmentation. Migrari post-Broadcom catre Proxmox cu economii 60-90%.
- vSphere 7/8, vCenter design + deploy multi-site
- HA + DRS + vMotion + Storage vMotion
- vSAN, NFS, iSCSI, Fibre Channel
- Site Recovery Manager (SRM) DR orchestration
- Veeam B&R integration nativa
- NSX-T microsegmentation, distributed firewall
- Horizon VDI basic
- vRealize Operations + Log Insight
- Upgrade major version cu zero downtime
- Capacity planning, right-sizing, cost optimization
🪟 Hyper-V
Hyper-V Failover Cluster cu Storage Spaces Direct hyperconverged. Migrari P2V (server fizic → VM) curate, replicare cross-site, Veeam integration.
- Hyper-V Server (standalone & Core)
- Failover Cluster Manager pentru HA
- Storage Spaces Direct (S2D) hyperconverged
- Live Migration zero-downtime pentru patching
- Hyper-V Replica cross-site DR
- SCVMM (System Center Virtual Machine Manager)
- PowerShell DSC automation
- Nested virtualization, GPU passthrough
- iSCSI, SMB 3.0, ReFS deduplication
- Migrari P2V curate fara pierdere de date
🟠 Proxmox VE
Proxmox VE 8.x cu Ceph: aceeasi functionalitate ca VMware, fara licente scumpe. Migrare etapizata din VMware fara downtime extins.
- Cluster multi-node cu HA Manager
- Ceph storage distribuit hyperconverged
- ZFS local cu replicare async
- LXC containere + KVM VMs in acelasi cluster
- Proxmox Backup Server cu deduplication
- 0€ licenta Community Edition
- 110-1000€/CPU/an Enterprise Subscription (optional)
- Economii tipice 60-90% vs VMware
- ROI tipic in 6-12 luni
- Migrare etapizata din VMware cu OVF Tool
🌐 Networking
Switching enterprise multi-vendor (Cisco, Dell, Ubiquiti UniFi, HPE Aruba, Juniper, Mikrotik) + WiFi 6/6E enterprise. Site survey predictiv, RADIUS 802.1X.
- Switch-uri Cisco Catalyst, Nexus (CLI)
- Dell PowerSwitch / OS10 + Force10 legacy
- Ubiquiti UniFi PoE + controller self-hosted
- VLAN 802.1Q, trunking, LAG/LACP, MSTP/RSTP
- Wireless WiFi 5/6/6E in/outdoor + site survey
- HPE Aruba, Juniper EX switches (basic)
- Layer 3 routing, OSPF, static, policy-based routing
- RADIUS 802.1X authentication
- NetFlow / sFlow collection + analysis
- Network monitoring SNMP cu LibreNMS / Zabbix
📊 Monitorizare & SOC 24/7
Vezi totul, nu pierzi nimic. Stack Nagios + Check_MK + Zabbix + Grafana + Prometheus + Loki. Alerting calibrat (zero spam), SOC uman 24/7 cu response < 15 min.
- Nagios Core/XI + Check_MK Raw + Tribe29
- Zabbix 7.x templates custom per platforma
- Grafana dashboards + Prometheus exporters
- Loki / Graylog / ELK pentru log aggregation
- Suricata IDS/IPS + Wazuh SIEM + CrowdSec
- Response time P1: < 15 minute (24/7)
- Response time P2: < 1 ora
- Response time P3: < 4 ore lucratoare
- Uptime monitoring: 99.99%
- Tura de garda cu matrice de escaladare
☸️ Kubernetes & microservicii
Cluster K8s production-grade: self-hosted (kubeadm, RKE2, k3s edge) sau managed (EKS/AKS/GKE). GitOps cu ArgoCD, secrets in Vault, observability completa, RBAC strict.
- Self-hosted K8s cluster (kubeadm, RKE2, k3s)
- Managed: EKS, AKS, GKE setup si migrare
- Service mesh: Istio, Linkerd cu mTLS
- GitOps cu ArgoCD / Flux pentru CD automat
- Velero backup + restore cross-cluster
- Migrare monolit → microservicii
- CI/CD pipeline cu zero-downtime deploy
- Multi-cluster cu disaster recovery
- Auto-scaling HPA + Cluster Autoscaler
- Edge computing cu k3s pe IoT/branch sites
💻 Software la comanda
Aplicatii custom integrate cu infrastructura ta: conectare baze de date, integrari API, BI dashboards, AI chatbots (Claude/OpenAI), ETL pipelines, automatizari.
- Conectare baze de date (PostgreSQL, MySQL, MSSQL, Oracle)
- Integrari API REST / SOAP / GraphQL + webhooks
- Dashboards BI (Streamlit, Grafana, Metabase)
- Chatbot AI cu LLM (Claude, OpenAI) + context business
- ETL pipelines (Python, Airflow, parallel workers)
- Stack: Python, Node.js, PHP, .NET, Java
- Frontend: React, Vue, Streamlit, Flask
- Database: PostgreSQL, MySQL, MongoDB, Redis
- Queues: RabbitMQ, Kafka, Redis Streams
- Deploy: Docker, K8s, GitLab CI/CD
Ce oferim clientilor din Timisoara
📋 Audit gratuit infrastructura
Analizam ce ai in productie si raportam riscuri, oportunitati, costuri optimizabile.
📐 Plan de implementare
Roadmap cu prioritati, termene, buget. Decizii informate, nu surprize.
🔧 Implementare + hardening
CIS Benchmarks, GDPR-ready, NIS2 compliant. Best practices, nu copy-paste.
📚 Documentatie completa
Diagrame de retea, runbook-uri, wiki self-hosted. Tu detii totul.
📡 Monitoring 24/7
SOC uman cu response < 15 min P1/P2. Zero black-box, alerting calibrat.
📞 Suport SLA strict
Contract clar cu RTO/RPO documentate. Comunicare directa pe Telegram/Signal.
🚗 Deplasari on-site
Din Alba Iulia ajungem in Timisoara pentru interventii fizice, audit, training.
🎓 Training echipa interna
Predam cunostintele tehnice echipei tale. Nu te facem dependent de noi.
Cere oferta pentru Timisoara →