BG, Bulgarian version of this pageFree auditSend an enquiry

Cybersecurity

Website security and data protection

We protect your website and your customers' data from breaches and leaks. We help you put GDPR requirements in place, so you can work with confidence and keep your customers' trust.

We check your site for weak points, close them and monitor it around the clock.

Send an enquiry

When protection becomes urgent

  1. A site problem or a data leak could bring your business to a halt

    When enquiries, orders or customer data pass through the site, one incident hits sales, not just the technology.

  2. Forms and customer lists collect personal data without clear rules

    Nobody has written down what data is kept, where it is stored, who can access it and why.

  3. Nobody checks for weak points regularly

    The site is only as secure as it was on launch day, and new vulnerabilities have been discovered since then.

How protection works

Automated programs crawl sites across the internet looking for outdated software, weak passwords and unprotected forms. They do not pick sites by name, so a small company website is a target too. Protection is not a one-off setting but work that has to be repeated.

We work on several levels. We check the site for weak points and close them. We put protection in front of the site and on the login to its admin area. The site is monitored round the clock for unusual activity, and if an incident occurs, we limit the damage, establish what happened and remove the cause.

Separately, we help you put clear rules in place for the personal data your site collects, in line with the General Data Protection Regulation (GDPR): what data is collected, why, who has access to it and what the people who submit it are told. For an example of what that kind of information can look like, see our privacy and cookies page.

What protection can include

Which measures you need depends on the site and the data your business works with, and is set out in the proposal.

  • Vulnerability assessment

    A review of the site for known vulnerabilities and the ways to close them.

  • Malware scanning

    Finding and removing hidden code that steals data or shows other people's ads.

  • Web application firewall

    A filter that stops suspicious requests before they reach the site.

  • Protection against overload attacks

    Measures against attempts to take the site down with a huge number of simultaneous requests.

  • Security headers

    Settings through which the site tells the visitor's browser how to display it safely.

  • Login protection

    Two-step verification and limits on login attempts to the admin area.

  • GDPR compliance work

    A review of the personal data collected by the site and its forms, and help putting clear rules in place for it.

  • Incident response

    Limiting the damage, establishing the cause and restoring normal operation.

  • Security reports

    Information on what was checked, what was found and what was fixed.

What we measure

  • Weak points found and closed

    How many vulnerabilities the checks have found and how many of them have already been fixed.

  • Incident response time

    How much time passes between detecting a problem and bringing it under control.

What we do not promise with protection

  • Protection from every possible attack

    No protection rules out every risk. The work reduces weak points and helps you respond faster when something happens.

  • A legal outcome

    We help you put rules for personal data in place, but we cannot predict how a supervisory authority will assess them.

  • Legal advice

    Our GDPR work does not replace a lawyer. For an interpretation of the law in your particular case, consult a legal adviser.

Where protection fits in the way we work

Before any money is spent on advertising, we check the site it will send people to. Its security and the forms that data comes through are part of that foundation.

How much site and data protection costs

The price is set after an online meeting, because it depends on your business, your site and the data it collects.

The proposal covers the measures your case actually needs rather than everything on a checklist, so you do not pay for protection that makes no sense for your site.

How a proposal comes together

Questions before an enquiry about protection

Can protection be a one-time job?

Yes, the work can start as a one-time project, for example an assessment that closes the weak points. Protection still needs repeated checks, so we also work on an ongoing basis with a monthly subscription, and we decide together after the meeting which suits your site.

Do you send the protection proposal in writing?

On request. After the online meeting we send it to you in writing.

How does the meeting work?

Online. We talk about your business, your site and the data you collect, to understand what matters most to protect.

Related services

Articles about cybersecurity and compliance

  • The AI Act: what it requires from your website and marketing from 2 August 2026

    From 2 August 2026 the transparency rules in Article 50 of the AI Act apply: chatbots must say they are AI, realistic generated images and video (deepfakes) must be labelled, and AI text on matters of public interest must be disclosed unless a person has reviewed it and takes editorial responsibility. The Digital Omnibus on AI postponed the high-risk rules, but not these. Start with an inventory of AI tools, disclosure texts and internal approval.

  • NIS2 requirements: is your company in scope, and where do you start?

    With the amendments to the Cybersecurity Act of February 2026, NIS2 requirements cover many mid-sized companies in sectors such as manufacturing, food, ICT and healthcare, and indirectly their suppliers too. Significant incidents are reported with an early warning within 24 hours, a notification within 72 hours and a final report within one month of the notification, and management carries personal responsibility. Start by checking scope, listing your assets and assessing risk.

Tell us what your site holds

Briefly describe the site, what data it collects and what worries you, without sending the data itself. We will get in touch and arrange an online meeting.

Send an enquiry