Cybersecurity

Cybersecurity for SMEs

Reduce the attack surface, limit spreading, guarantee recovery.

At SMB SOFT, security is built into every project: FortiGate firewalls, network segmentation, Windows and Ubuntu server hardening, Active Directory rights management, encrypted remote access and tested backups. Our approach is pragmatic: measures that fit your company size and your real risks.

What we do

Audit & assessment

Inventory of equipment and accounts, internet-exposed services, missing patches, backups: a prioritised action plan.

Firewall & filtering

Tight FortiGate policies, web filtering, intrusion prevention and event logging.

Segmentation & least privilege

Servers, workstations, guests and IoT isolated; each account only has the rights it needs.

System hardening

Updates, unused services disabled, key-based SSH, UFW firewall on Ubuntu, security GPOs on Windows.

Secure remote access

Site-to-site VPN for branches and remote access VPN (RA VPN) for teleworking, instead of services exposed directly on the internet.

Backup & recovery

Encrypted, verified Proxmox Backup Server backups, off-site copies following the 3-2-1 rule and regular restore tests.

Secure development

Prepared statements, XSS and CSRF protection, HTTPS, reCAPTCHA: our applications are secure by design.

Technologies

Fortinet FortiGate
Web filtering
IPS
VLAN
Site-to-site VPN
RA VPN
Active Directory
GPO
UFW
SSH
HTTPS / TLS
Proxmox Backup Server
3-2-1 backup

Frequently asked questions

Are SMEs really targeted by cyberattacks?

Yes. Most attacks (ransomware, phishing) are automated and target poorly protected systems, whatever the size of the company. SMEs are often less equipped, and therefore more exposed.

Where should I start to secure my company?

With an assessment: know what is exposed, who has access to what and whether backups work. Then come the most cost-effective measures: a well-configured firewall, updates, segmentation and off-site backups.

Do you offer long-term follow-up?

Yes, through maintenance contracts: equipment and server updates, firewall rule reviews, backup checks and support in case of an incident.

A software, AI, network or security project?

Let’s talk: no-obligation first discussion, answer within 24 h.