ARKSTONE
SECURITY
SECURITY
Solutions system integrator in information security area
Change language
Information security
We assist our partners to protect their network from all types of threats by means of information security The scope of our company includes provision of solutions such as SIEM, PAM, multifactor authentication, scanners of vulnerability, source code scanners and many other protection tools
Our Vision - To become the largest information security systems provider company in the Uzbekistan market by 2025
We provide information security solutions for your business!
Our mission
Our mission is to help organizations around the world to protect their business and intellectual property from ever-increasing cyber threats.
Solutions
The scope of our company includes such solutions as SIEM, PAM, multifactor authentication, information security auditing, vulnerability scanners, penetration tests, IT outsourcing, technical support and more. penetration tests, IT outsourcing, technical support and much more.
Professionalism
A large number of projects and high qualification of our specialists
Experience
A team with years of experience and deep expertise in the field of IS
Pragmatism
Attention to detail at all stages of the project
Licenses
We have all the necessary licenses to provide services in the field of IS
Check Point Software Technologies
Check Point Software Technologies Ltd. - is considered as one of the leaders in the industry of information security and has been attempting to ensure the reliable operation of its information products of its clients for the period of 25 years.
Check Point offers customers the highest level of protection against all types of threats to simplify the management of security and reduce deployment and operational costs.
Check Point solutions are utilized by a great number of enterprises as well as organizations of all sizes, including all the companies of Fortune-100. The company's award-winning solutions prevent millions of customers from hackers, spyware and illegal access to most important data.
Check Point offers customers the highest level of protection against all types of threats to simplify the management of security and reduce deployment and operational costs.
Check Point solutions are utilized by a great number of enterprises as well as organizations of all sizes, including all the companies of Fortune-100. The company's award-winning solutions prevent millions of customers from hackers, spyware and illegal access to most important data.
Micro Focus
Micro Focus (formerly HPE Software) is a British company and is one of the largest manufacturers of the software of broad spectrum in the world. The portfolio of the company regarding the solutions includes highly effective solutions to ensure security of the information of Arcsight, Fortify, NetIQ.
Micro Focus tries to be at the forefront of innovation and deliver high quality, enterprise-grade software of the highest quality.
Micro Focus's service portfolio spans a wide range of technologies and services, including DevOps, hybrid IT, security and risk assessment, and predictive analytics from mainframe to mode of mobile services.
Micro Focus tries to be at the forefront of innovation and deliver high quality, enterprise-grade software of the highest quality.
Micro Focus's service portfolio spans a wide range of technologies and services, including DevOps, hybrid IT, security and risk assessment, and predictive analytics from mainframe to mode of mobile services.
Rapid7
Rapid7 is one of the leading manufacturers of products for security management of network, analysis of the IT infrastructure prevention system from the penetration of potentially dangerous objects. The integrated solutions of the company assist optimization of the security of the network, web applications as well as the databases.
In development of applications, Rapid7 utilizes the open source platform of Metasploit, which can allow you to form and test special programs which use vulnerabilities to attack the system of IT for the purposes of information security. Rapid7 develops security supervision technologies for enterprise infrastructure of IT in co-operation with Archer Technologies, RSA, SecureWorks, TrendMicro and others. The achievements of the company and growth have repeatedly been noted at international competitions and conferences that are heeded to be of prime and elegant importance. Rapid7 solutions are used by more than 3000 organizations in 78 countries around the globe.
In development of applications, Rapid7 utilizes the open source platform of Metasploit, which can allow you to form and test special programs which use vulnerabilities to attack the system of IT for the purposes of information security. Rapid7 develops security supervision technologies for enterprise infrastructure of IT in co-operation with Archer Technologies, RSA, SecureWorks, TrendMicro and others. The achievements of the company and growth have repeatedly been noted at international competitions and conferences that are heeded to be of prime and elegant importance. Rapid7 solutions are used by more than 3000 organizations in 78 countries around the globe.
Tenable
Tenable, Inc. is considered as a leader of Cyber Exposure Management systems - supervision over the surface of cyber risk.
Tenable solutions are developed for the continuous assessment of the present status of vulnerability and cyber context of traditional IT infrastructure, mobile and cloud environments, containers / DevOps / CI / CD together with operational technologies, ICS and the Internet of Things (IoT). Such holistic approach enables institutions to see an up-to-date evaluation of the health of their infrastructure and take action to protect critical assets.
Tenable solutions are developed for the continuous assessment of the present status of vulnerability and cyber context of traditional IT infrastructure, mobile and cloud environments, containers / DevOps / CI / CD together with operational technologies, ICS and the Internet of Things (IoT). Such holistic approach enables institutions to see an up-to-date evaluation of the health of their infrastructure and take action to protect critical assets.
Fortinet
One of the professional providers of integrated high-performance security solutions of IT.
The company manufactures network, content and products of access security that support exchange of data and form an end-to-end system collectively. The unique Security Fabric adaptive network security system consists of processors of security, an intuitive operating system and the capability to gather and deploy threat intelligence. All the components provide security and high performance, efficient supervision and administration. The Fortinet Security Fabric delivers integration, automation and broad reach while staying much easy to control.
The company manufactures network, content and products of access security that support exchange of data and form an end-to-end system collectively. The unique Security Fabric adaptive network security system consists of processors of security, an intuitive operating system and the capability to gather and deploy threat intelligence. All the components provide security and high performance, efficient supervision and administration. The Fortinet Security Fabric delivers integration, automation and broad reach while staying much easy to control.
Falcongaze
Falcongaze has been developing software in the area of information security since 2007. The best product of the company is a comprehensive solution SecureTower, that is designed to prevent leaks of information and monitor activities of the employee.
Falcongaze SecureTower is a comprehensive infrastructure solution that contains a number of components. Each of them discharges its specific functions - scanning traffic, detection of confidential documents, analyzing correspondence in instant messengers and many more. Furthermore, all the components are unified into a single system and share a common center of control.
Supervision of channels of data transmission
Analysis of all intercepted information in accordance with the specified rules of security
Evaluation of loyalty of the staff
Reporting a violation of rules of safety
Incident reporting
Prioritization and investigation of incidents
Falcongaze SecureTower is a comprehensive infrastructure solution that contains a number of components. Each of them discharges its specific functions - scanning traffic, detection of confidential documents, analyzing correspondence in instant messengers and many more. Furthermore, all the components are unified into a single system and share a common center of control.
Supervision of channels of data transmission
Analysis of all intercepted information in accordance with the specified rules of security
Evaluation of loyalty of the staff
Reporting a violation of rules of safety
Incident reporting
Prioritization and investigation of incidents
CyberArk
CyberArk Software Ltd is software company of information security of Israel specializing in protection and supervision of privileged users, empowering companies to advance security, improve supervision of productivity and prevent the threat of activity of insider.
CyberArk's technologies are mainly used in the services of energy, healthcare, financial, government and sectors of retail. At the beginning phase of 2019, more than four thousand clients were registered with the company.
CyberArk's technologies are mainly used in the services of energy, healthcare, financial, government and sectors of retail. At the beginning phase of 2019, more than four thousand clients were registered with the company.
Trend Micro
A Japanese software company of cybersecurity.
Trend Micro is a proven developer of server and security software of cloud, cybersecurity solutions for large, average and small businesses as well as products of home security.
Trend Micro Cloud Security and Virtualization Products provide cloud protection for VMware, Amazon AWS, Microsoft Azure and customers of vCloud Air.
Trend Micro is a proven developer of server and security software of cloud, cybersecurity solutions for large, average and small businesses as well as products of home security.
Trend Micro Cloud Security and Virtualization Products provide cloud protection for VMware, Amazon AWS, Microsoft Azure and customers of vCloud Air.
Titus
TITUS is a manufacturer of solutions of security and supervision of data ensuring the secure exchange of information and compliance with industry, regulatory and corporate standards. More than 2 million users worldwide use the products of the company.
TITUS solutions enable agencies of businesses, military and government sector to protect confidential information and comply with legal standards on an effective level.
The product line of the company includes TITUS Classification, a privacy categorization and classification solution for messages, documents as well as files which can enhance protection of leak by users that are included in the classification of sensitive information; TITUS Mobile, an application of email that provides a secure environment for sending and viewing emails on mobile devices and the TITUS family of privacy and solutions of security for Microsoft SharePoint.
TITUS solutions enable agencies of businesses, military and government sector to protect confidential information and comply with legal standards on an effective level.
The product line of the company includes TITUS Classification, a privacy categorization and classification solution for messages, documents as well as files which can enhance protection of leak by users that are included in the classification of sensitive information; TITUS Mobile, an application of email that provides a secure environment for sending and viewing emails on mobile devices and the TITUS family of privacy and solutions of security for Microsoft SharePoint.
Sonarsource
SonarSource delivers world-class solutions for developing and permanent mode of control of code quality.
Open source solutions and commercial products support customers of all volumes to supervise the quality of their code of application, minimize risk and consequently deliver software in a more improved state.
SonarSource solutions cover more than 20 languages of programming, including Java, C #, JavaScript, C / C ++, TypeScript, COBOL and many more.
With over 1,000 customers around the whole globe, including eBay, Thales, BMW and over than 85,000 companies, SonarSource products are recognized on an international level, implemented and utilized in many areas and industries.
Open source solutions and commercial products support customers of all volumes to supervise the quality of their code of application, minimize risk and consequently deliver software in a more improved state.
SonarSource solutions cover more than 20 languages of programming, including Java, C #, JavaScript, C / C ++, TypeScript, COBOL and many more.
With over 1,000 customers around the whole globe, including eBay, Thales, BMW and over than 85,000 companies, SonarSource products are recognized on an international level, implemented and utilized in many areas and industries.
Solar (appScreener)
Rostelecom-Solar, a company of the group of PJSC Rostelecom, is a national provider of services and technologies for the prevention of cases of information assets, targeted monitoring and management of information security.
The proposed technologies are all based on the comprehension that real information security is only possible through continuous monitoring and suitable supervision of system of information security. Such principle is implemented in products as well as services of Rostelecom-Solar.
The proposed technologies are all based on the comprehension that real information security is only possible through continuous monitoring and suitable supervision of system of information security. Such principle is implemented in products as well as services of Rostelecom-Solar.
Wallix
Wallix provide three versions of the Wallix Bastion PAM platform - for microorganizations, the SMB sector and large enterprises. The system provides real-time monitoring and logging of privileged user activity. If suspicious activity is detected, Bastion can automatically terminate the session and notify the administrator of the incident. The solution requires no agents to be installed on client devices and meets GDPR, PCI DSS, SOX, and other regulatory requirements.
Translated with www.DeepL.com/Translator (free version)
Translated with www.DeepL.com/Translator (free version)
Symantec
Symantec has been present in the DLP market for a long time, and overall it is a recognized global leader in the DLP market. For many years, Symantec's solution has been the leader in the Content-Aware Data Loss Prevention research by Gartner. Symantec Data Loss Prevention (DLP) is designed for deployment in companies of all sizes, from small businesses (with 100 or more users) to large organizations (with more than 10,000 users). The largest Symantec DLP implementation was in a company with over 300 thousand employees, unfortunately, the company name was not disclosed. The largest open implementation was in the consulting company Deloitte, which has about 180 thousand employees.
SearchInform
"SearchInform Information Security Contour, developed by the Russian company SurchInform LLC, is a comprehensive DLP system for protection against insider actions and confidential data leaks. The system implements a wide range of capabilities to control data channels and employee efficiency.
Juniper
Juniper Networks is an American telecommunications equipment company, primarily for Internet service providers, corporations and the public sector. It was founded by Pradeep Sindhu in 1996. It is headquartered in Sunnyvale, California, Silicon Valley. The company's name Juniper translates from English as Juniper.
Since its inception to the present day, Juniper Networks has specialized in developing high-speed streaming data processing solutions for top-level networking solutions. Most of the company's products use proprietary network processors and run JUNOS, a FreeBSD-based operating system with a full suite of POSIX-compliant commands and tools. JUNOS is also known for a high degree of regress testing (three releases per year).
Since its inception to the present day, Juniper Networks has specialized in developing high-speed streaming data processing solutions for top-level networking solutions. Most of the company's products use proprietary network processors and run JUNOS, a FreeBSD-based operating system with a full suite of POSIX-compliant commands and tools. JUNOS is also known for a high degree of regress testing (three releases per year).
Pentera
Pcysysys PenTera is the world's first penetration test automation platform, developed by Pcysysys, Israel. In October 2020, Gartner included Pcysys in its "Cool Vendors in Security Operations and Threat Intelligence" report and noted the unique technology behind the PenTera platform. The system simulates hacker logic and behavior using machine algorithms, giving IS professionals a tool that acts as a virtual adversary. The virtual attacker tests an organization's infrastructure for penetration using the latest techniques, detecting weaknesses in the IT environment, corporate IS policies and user behavior. The platform visualizes complete attack vectors and prioritizes remediation of vulnerabilities significant to a particular network. It gives the organization a tool for continuous penetration testing, continuously improving and maintaining a high level of network security.
Акционерный Инновационный Коммерческий Банк «Ипак Йули»
Акционерный Инновационный Коммерческий Банк «Ипак Йули» осуществляет свою деятельность с 1990 года. На сегодняшний день Банк действует на основании лицензии на проведение банковских операций № 10 от 21 октября 2017 года. Головной офис находится в г. Ташкент.
С 2013 года акционером Банка является Азиатский банк развития. Данная сделка была первой капитальной инвестицией АБР в центрально-азиатском регионе.
В середине 2020 года Немецкий Финансовый Институт Развития DEG- Deutsche Investitions- und Entwicklungsgesellschaft mbH и Triodos Investment Management (через свой фонд Triodos Microfinance Fund) инвестировали около 25 миллионов долл. США в акционерный капитал АИКБ «Ипак Йули». Инвесторы приобрели равную миноритарную долю акционерного капитала банка путем покупки новых выпущенных акций, что представляет собой их первую инвестицию в акционерный капитал банка в Узбекистане.
Согласно результатам анализа деятельности коммерческих банков Узбекистана, по масштабности деятельности Банк «Ипак Йули» по итогам 2019 года занимает 13 позицию, рыночная доля составляет 1,95 процента.
Банк ведет бизнес деятельность в следующих основных направлениях:
Малое и частное предпринимательство;
Корпоративный бизнес;
Розничный бизнес;
Финансовые институты;
Инвестиционный бизнес.
Региональная сеть Банка Ипак Йули насчитывает 17 филиалов в городе Ташкент и регионах Республики Узбекистан. В настоящее время в регионах у нас действует 9 филиалов, а также 8 филиалов в городе Ташкент, при которых действует 30 минибанков и 22 спецкассы, более 10 тысяч терминалов, а также мы установили и подключили более 200 банкоматов по всему Узбекистану. Продукты и услуги Банка представлены в подавляющем большинстве регионов. Кроме того, в соответствии со Стратегией Банка на ближайшие 3 года запланировано открытие еще нескольких филиалов в регионах.
Цифровые каналы Банка включают в себя мобильные приложения IpakYo’liMobile, Ipak Yo’li Mobile for business и сервис Интернет-банк.
Еще в 2017 году, Банк одним из первых среди банков республики начал внедрение цифровых каналов Банка, для создания условий для клиентов для получения ряда дистанционных услуг в частности запустил банковское приложение для мобильных телефонов, а также Интернет-банк.
С 2013 года акционером Банка является Азиатский банк развития. Данная сделка была первой капитальной инвестицией АБР в центрально-азиатском регионе.
В середине 2020 года Немецкий Финансовый Институт Развития DEG- Deutsche Investitions- und Entwicklungsgesellschaft mbH и Triodos Investment Management (через свой фонд Triodos Microfinance Fund) инвестировали около 25 миллионов долл. США в акционерный капитал АИКБ «Ипак Йули». Инвесторы приобрели равную миноритарную долю акционерного капитала банка путем покупки новых выпущенных акций, что представляет собой их первую инвестицию в акционерный капитал банка в Узбекистане.
Согласно результатам анализа деятельности коммерческих банков Узбекистана, по масштабности деятельности Банк «Ипак Йули» по итогам 2019 года занимает 13 позицию, рыночная доля составляет 1,95 процента.
Банк ведет бизнес деятельность в следующих основных направлениях:
Малое и частное предпринимательство;
Корпоративный бизнес;
Розничный бизнес;
Финансовые институты;
Инвестиционный бизнес.
Региональная сеть Банка Ипак Йули насчитывает 17 филиалов в городе Ташкент и регионах Республики Узбекистан. В настоящее время в регионах у нас действует 9 филиалов, а также 8 филиалов в городе Ташкент, при которых действует 30 минибанков и 22 спецкассы, более 10 тысяч терминалов, а также мы установили и подключили более 200 банкоматов по всему Узбекистану. Продукты и услуги Банка представлены в подавляющем большинстве регионов. Кроме того, в соответствии со Стратегией Банка на ближайшие 3 года запланировано открытие еще нескольких филиалов в регионах.
Цифровые каналы Банка включают в себя мобильные приложения IpakYo’liMobile, Ipak Yo’li Mobile for business и сервис Интернет-банк.
Еще в 2017 году, Банк одним из первых среди банков республики начал внедрение цифровых каналов Банка, для создания условий для клиентов для получения ряда дистанционных услуг в частности запустил банковское приложение для мобильных телефонов, а также Интернет-банк.
Comnet
Находясь на рынке телекоммуникационных услуг с 2003г, компания ООО “IPLUS” ™Comnet неуклонно следует заданному курсу развития, придерживаясь концепции клиентоориентированности и став одним из ведущих провайдеров Узбекистана. За период своей деятельности компания приобрела репутацию надежного и устойчивого оператора связи с уверенной динамикой развития, своевременно и качественно выполняющей свои обязательства перед клиентами и партнерами.
Shark Telekom
Компания "Sharq Telekom" начала свою деятельность в июле 2003 года. Сегодня является одним из ведущих операторов сетей передачи данных в Узбекистане. Компания располагает необходимым техническим потенциалом для оказания услуг на современном уровне и реализации новых проектов.
С наступлением эры информационных и коммуникационных технологий каждый из нас стоит на пороге вхождения в мировое информационное сообщество и на этом фоне вполне естественным является желание компании "Sharq Telekom" соответствовать самым высоким требованиям, предъявляемым нашими клиентами.
Мы стремительно развиваемся и модернизируем имеющееся оборудование, а также закупаем новое, улучшаем сервис, набираемся опыта, чтобы на должном уровне предоставлять услуги Интернет и удовлетворять потребности наших клиентов.
Компания осуществляет постоянный мониторинг всех систем связи. Служба технической поддержки действует круглосуточно.
С наступлением эры информационных и коммуникационных технологий каждый из нас стоит на пороге вхождения в мировое информационное сообщество и на этом фоне вполне естественным является желание компании "Sharq Telekom" соответствовать самым высоким требованиям, предъявляемым нашими клиентами.
Мы стремительно развиваемся и модернизируем имеющееся оборудование, а также закупаем новое, улучшаем сервис, набираемся опыта, чтобы на должном уровне предоставлять услуги Интернет и удовлетворять потребности наших клиентов.
Компания осуществляет постоянный мониторинг всех систем связи. Служба технической поддержки действует круглосуточно.
Lider Team
LIDER TEAM — молодая, динамичная IT-компания, специализирующаяся на поставке и продаже телекоммуникационного оборудования.
Мы предоставляем активное и пассивное телекоммуникационное оборудование: волоконно-оптический кабель, оптические патч-корды, коммутаторы, медиаконвертеры, SFP модули, муфты, кроссы, серверные шкафы и много другое..
Компания имеет большой опыт в реализации проектов по сетевой и системной интеграции любой степени сложности с использованием оборудования ведущих производителей и в соответствии с узбекскими и международными стандартами качества.
Мы предоставляем активное и пассивное телекоммуникационное оборудование: волоконно-оптический кабель, оптические патч-корды, коммутаторы, медиаконвертеры, SFP модули, муфты, кроссы, серверные шкафы и много другое..
Компания имеет большой опыт в реализации проектов по сетевой и системной интеграции любой степени сложности с использованием оборудования ведущих производителей и в соответствии с узбекскими и международными стандартами качества.
Universalbank
Joint-Stock Commercial Bank "Universal Bank" was founded in 2001 and today is an actively developing, universal bank with a wide range of services and a special attitude to each client. We are accessible and open to all clients.
The bank is active in both corporate and retail segments. Flexible tariffs, an individual approach to the specifics of the clients' business, the development of new modern banking products in accordance with the needs of the market, lead to a dynamic growth of the bank's financial indicators, allowing the bank to become even more successful.
Currently, the bank is at a new stage of development, which involves the use of advanced banking technologies, prompt response to changes in real demand for all types of banking products, expanding the range of services and improving customer service.
JSCB "Universal Bank" has 7 branches: in the Fergana region (Kokand, Fergana, Buvayda), in the Namangan region, in Tashkent and in the Zangiota region.
Our mission: To provide high-quality financial services based on impeccable client service and modern technologies. For us, not only each client is important, but also the opportunity to be a reliable partner for him.
In its development strategy, Universal Bank places great emphasis on providing quality financial services in branches and mini-banks, and also aims for a regional presence in all major cities and regional centers of Uzbekistan
The bank's client base is represented by industrial, trade, public catering enterprises, credit, financial and insurance companies and other business entities.
According to the report of the international rating company Fitch Ratings for 2021, the long-term issuer default rating was affirmed at the level of "B-" with a "Stable" outlook
Tenge Bank
JSCB Tenge Bank is a universal bank that provides financial services to all categories of corporate and retail clients using modern banking technologies. The Bank is a 100% subsidiary of Halyk Bank of Kazakhstan JSC (Halyk Bank).
The mission of JSCB "Tenge Bank" is to provide services in Uzbekistan at the level of international standards, thereby ensuring the safety, efficient placement and increase of funds of customers and shareholders.
We value relationships with clients and bear social responsibility for bringing transparent lending conditions to borrowers!
The mission of JSCB "Tenge Bank" is to provide services in Uzbekistan at the level of international standards, thereby ensuring the safety, efficient placement and increase of funds of customers and shareholders.
We value relationships with clients and bear social responsibility for bringing transparent lending conditions to borrowers!
Uzcard
UZCARD - United Republican Processing Center LLC (trademark UZCARD). The company provides acquiring activities, processing of electronic payments, and also acts as a provider, uniting banks, payment organizations and other market participants.
Merging commercial banks into a single payment space based on a single software platform allowed participating banks to speed up the process of bringing new standardized products to the market to provide customers with more opportunities to use plastic cards. It also contributed to the provision of centralized assistance to the banks themselves in the implementation and development of card projects with savings in financial, technical and other resources.
Currently, UZCARD unites 32 commercial banks of the country, 47 payment aggregators. Users of UZCARD cards can pay for goods and services through POS and E-POS terminals, be served at ATMs and info kiosks, as well as conduct transactions through mobile applications and Internet banking systems throughout the country.
Merging commercial banks into a single payment space based on a single software platform allowed participating banks to speed up the process of bringing new standardized products to the market to provide customers with more opportunities to use plastic cards. It also contributed to the provision of centralized assistance to the banks themselves in the implementation and development of card projects with savings in financial, technical and other resources.
Currently, UZCARD unites 32 commercial banks of the country, 47 payment aggregators. Users of UZCARD cards can pay for goods and services through POS and E-POS terminals, be served at ATMs and info kiosks, as well as conduct transactions through mobile applications and Internet banking systems throughout the country.
Solutions
SIEM systems
Multi-factor authentication (MFA)
PAM
These are tools designed to manage information security in organizations as a whole and to manage...
This is an access control component that requires users to verify their identity using at least two different ...
Privileged user control is a group of solutions for monitoring and controlling the accounts of employees..
Vulnerability scanner
Information security audit
Source Code Scanners
Software or hardware comprehensive solution for real-time scanning of information infrastructure...
Information security audit is an opportunity to understand how well or poorly the company's IT assets are protected...
A software comprehensive solution that detects errors in the source code made during program development...
PAM
Server
Data communication system
Storage system
A set of computer hardware and software designed to manage, store and present information to users.
A collection of devices and systems that are connected to each other (logically or physically) and communicate with each other. This includes servers, computers, telephones, routers
The Data Storage System (DSS) is a complex software and hardware solution for organizing reliable storage of information resources and providing guaranteed access to them.
Firewall
A firewall (between the worldwide and corporate networks) that controls traffic to users and servers and blocks access to inappropriate content
SIEM systems
These are tools designed to manage information security in organizations as a whole and to manage...
Privileged user control is a group of solutions for monitoring and controlling the accounts of employees..
Multi-factor authentication (MFA)
This is an access control component that requires users to verify their identity using at least two different ...
Vulnerability scanner
Software or hardware comprehensive solution for real-time scanning of information infrastructure...
Source Code Scanners
A software comprehensive solution that detects errors in the source code made during program development...
Information security audit
Information security audit is an opportunity to understand how well or poorly the company's IT assets are protected...
Solutions
Information Security Consulting
APM
Information security (IS) consulting is the process of advising companies on cybersecurity and developing information protection strategies. Our IS consulting service is designed to help your company take the right steps to protect your information.
APM (Application Performance Management) is a methodology and a set of tools aimed at controlling and optimizing application performance. APM solutions allow you to detect and troubleshoot various problems that arise during application performance, such as application delays, errors, etc.
Pen-testing
Penetration testing is a security testing process in which experts check the security level of your system from within. Testing is performed by conducting test attacks on your system, and allows you to identify vulnerabilities and weaknesses in the structure of your system.
SIEM (Security Information and Event Management) systems
These are tools designed to manage information security in organizations as a whole and to manage events from various sources. SIEMs are capable of analyzing events from network devices and various applications in real time.
The main functions of SIEM systems:
The main functions of SIEM systems:
- collection, processing and analysis of security events coming into the system from multiple sources;
- real-time detection of attacks and violations of security criteria and policies;
- on-line security assessment of information, telecommunications and other critical resources;
- analysis and management of security risks;
- conducting incident investigations;
- making effective decisions to protect information;
- generation of reporting documents.
Privileged Account Management (PAM)
Privileged user control is a group of solutions for monitoring and controlling the accounts of employees in IT departments, system administrators, employees of outsourcing organizations involved in the administration of the company infrastructure, managing the authentication and authorization of these employees, auditing the actions performed, controlling access and recording their sessions.
User control systems with advanced capabilities fall into four main categories:
- Solutions that allow you to manage employee passwords and control access to shared accounts (SAPM);
- solutions that allow management of privileged user sessions to the organization's systems using a Single Sign-On (PSM) point of entry. In doing so, they allow you to monitor, record and store information about the actions of privileged users within a privileged session;
- solutions that allow analysis and filtering of the commands used by the system administrator (SPM);
- solutions that allow the control of embedded or service accounts that are used by different applications and services to perform their own functions (AAPM).
User control systems with advanced capabilities fall into four main categories:
- Solutions that allow you to manage employee passwords and control access to shared accounts (SAPM);
- solutions that allow management of privileged user sessions to the organization's systems using a Single Sign-On (PSM) point of entry. In doing so, they allow you to monitor, record and store information about the actions of privileged users within a privileged session;
- solutions that allow analysis and filtering of the commands used by the system administrator (SPM);
- solutions that allow the control of embedded or service accounts that are used by different applications and services to perform their own functions (AAPM).
Multi-factor authentication (MFA)
This is an access control component that requires users to verify their identity using at least two different verification factors before accessing a website, mobile app, or other online resource. With MFA, if one factor is compromised, an attacker still has at least one more barrier to overcome before they can access the target account.
Vulnerability scanner
Software or hardware comprehensive solution for real-time scanning of information infrastructure. The scanner is used to detect breaches in network security, operating systems, databases, applications, etc. The main task is to evaluate security, identify vulnerabilities and generate reports.
The administrator can use the vulnerability scanner to find "holes" used by hackers to gain unauthorized access to sensitive data on the company's network. Vulnerability Scanner can also monitor running processes, services, and scan ports in use.
Main Functions
The administrator can use the vulnerability scanner to find "holes" used by hackers to gain unauthorized access to sensitive data on the company's network. Vulnerability Scanner can also monitor running processes, services, and scan ports in use.
Main Functions
- searches for different types of network vulnerabilities and analyzes them in real time;
- checks network resources, operating systems, connected devices, ports;
- analyzes all active processes, behavior of running applications;
- generates reports that specify the type of vulnerability
Source Code Scanners
A software comprehensive solution that detects errors in the source code made during program development. Source code analysis is necessary to detect explicit and hidden vulnerabilities in the software, to check the application code for backdoors, which can be further used by intruders to gain unauthorized access to the system. Also, it is necessary to check for errors that can lead to malfunctions, loss of important and confidential data, or disruption of business processes.
There are several types of source code scanners depending on the application:
There are several types of source code scanners depending on the application:
- Web applications and web services - to reduce the risks of exploiting vulnerabilities in websites.
- Embedded application modules - to check the source code of additional components and modules that are integrated into the main software.
- Applications that are not related to business applications and sites - for secure software development.
Information security audit
Information security audit is an opportunity to understand how well or poorly the company's IT assets are protected. Our experts carry out a comprehensive check of the security status of information systems, identify weaknesses and inconsistencies. Based on the information gathered, we develop a detailed report on the state of IS security with recommendations for correcting deficiencies, based on international best practices.
Infrastructure audit
Survey of IT infrastructure in general and its components, analysis of its maintenance and data backup, assessment of the work of IT-specialists.
Security systems analysis
Checking the security level of sensitive data, access policies, information security processes, working with information security tools, dealing with vulnerabilities and incidents, assessing the overall security of the network infrastructure.
Finding the best solution
Based on the data obtained, the best way to improve the IS level is selected, taking into account the limitations of the organization - technical capabilities, budget, timing, etc.
Development of recommendations
Based on the data obtained, an action plan is developed to eliminate the identified vulnerabilities of information systems and improve their security.
Infrastructure audit
Survey of IT infrastructure in general and its components, analysis of its maintenance and data backup, assessment of the work of IT-specialists.
Security systems analysis
Checking the security level of sensitive data, access policies, information security processes, working with information security tools, dealing with vulnerabilities and incidents, assessing the overall security of the network infrastructure.
Finding the best solution
Based on the data obtained, the best way to improve the IS level is selected, taking into account the limitations of the organization - technical capabilities, budget, timing, etc.
Development of recommendations
Based on the data obtained, an action plan is developed to eliminate the identified vulnerabilities of information systems and improve their security.
The Data Storage System (DSS)
The Data Storage System (DSS) is a complex software and hardware solution for organizing reliable storage of information resources and providing guaranteed access to them.
Communication System
A collection of devices and systems that are connected to each other (logically or physically) and communicate with each other. This includes servers, computers, telephones, routers
Firewall
A firewall (between the worldwide and corporate networks) that controls traffic to users and servers and blocks access to inappropriate content.
Do you have any questions?
Ask them to our manager!
Menu
Solutions system integrator in information security area
©2024 Arkstone Security Corp
All rights reserved.
All rights reserved.