One monitoring standard — for every client
We do not split monitoring into tiers. Every deployment gets the same set of tools, and
every deployment gets the map — not just the top package. Scope differs by the number
of devices and locations, not by what you get to see.
Zabbix — network, servers and computers
Switches, access points, cameras, recorders, controllers and power, as well as servers and
computers: availability, load, disks, services, internet link, certificates. An alert when
something stops working — or is about to.
Wazuh — security
Logs from servers, computers and network devices in one place: failed logins, changes to
important system files, suspicious events. VirusTotal is integrated with it (see below).
Pi-hole with Unbound — DNS under control
Your own name server inside your network: it blocks advertising, tracking and known malicious
domains, and shows which device is trying to reach them. It sees domain names, not traffic
content — and only for devices that use it; equipment with a hard-coded external or encrypted
DNS bypasses it.
ESET with its console — endpoint protection
Antivirus protecting computers and servers in real time. In the package we deploy it together
with its management console and connect its detections to the rest of the system.
NetDoc map — everything in one view
Devices and the links between them, on your floor plan when one is available. Next to each
device you see what all the tools know about it at once.
The tools complement each other
Zabbix tells you a server is up, but not who logged into it — Wazuh sees that. Wazuh notices
a new file in a system folder, and VirusTotal and ESET decide whether it is malware. Pi-hole
shows which computer tried to reach a malicious domain. The map joins these pieces: one device,
one picture, instead of five separate dashboards.
Everything except ESET and the VirusTotal service is open-source, free software. Data is
collected by a collector installed at your site and stays with you — the exceptions are
file hashes sent to VirusTotal and what ESET sends to the vendor's cloud. The report is produced at your site, and a copy reaches
us only with your consent. We deploy, maintain and update the tools — and
any administrator knows them and can take over if needed.
VirusTotal does not replace your antivirus — and it does not have to
VirusTotal is a public service in which dozens of antivirus engines assess the same file.
In our standard, Wazuh uses it. Wazuh watches selected, important locations in the system —
system folders, autostart, directories that installers usually write to. When its next scan
finds a new or changed file there (scan frequency is set during deployment), Wazuh computes
its hash and asks VirusTotal whether any engine knows it as malware. If so, an alert appears
in the security console and in the report, with the computer name, the file path and the number
of engines that flagged it.
Only the file hash is sent to VirusTotal — not the file itself or its contents.
ESET works differently: it protects in real time — it blocks and removes threats on the
computer. VirusTotal blocks nothing. It is a second, independent opinion: if something
slipped past one antivirus, one of dozens of others often recognises it.
- only files in watched locations are checked — not the whole disk or memory;
- it recognises already known malware — a new file that nobody has described yet passes without an alert; that is ESET's job;
- for business use we use paid access to VirusTotal (the free tier is for non-commercial use only); its cost is included in the quote, and the watched locations are matched to the licence's request limit;
- it is an alert, not a cure: what happens after an alert is agreed with you before go-live.
How deep we can see into the wireless network depends on what the vendor's controller exposes —
one shows the connection quality of every device and failed logins, another only their count.
We check this in the first conversation and tell you plainly what will be visible
before we start.
We agree the scope and price before work starts — never afterwards, and with no surcharges
appearing along the way. The effort depends on the number of devices, computers and locations,
and — for the map on a floor plan — on the state of the plans. That is why we start with
a conversation about your network, not with a price list.
