Services
IT security services
We assess, implement requirements in a structured way and support ongoing security operations. Detailed service descriptions are available on our German website.
Last updated:
In short
What services does solbytech offer?
solbytech offers services in three areas: assessing security (security checks, penetration testing, vulnerability management, Microsoft 365 and cloud security checks, CIS hardening, AI security), meeting requirements (ISMS under ISO/IEC 27001, NIS2 as implemented in Austria by the NISG 2026, technical data protection under the GDPR, EU AI Act, supply chain security) and ongoing support (managed cyber security, external information security officer, training and talks, incident response planning, business continuity management).
Assess security
We find out where you are vulnerable and prioritise what to fix first.
- IT security checks and status analysis
- Penetration testing of networks and web applications
- Vulnerability management
- Microsoft 365 and cloud security checks
- Social engineering and phishing simulations
- System hardening based on CIS Benchmarks
AI security
Consulting, security testing and training for AI applications: data flows, local, hybrid and cloud-based approaches, integrations, agent permissions, human approvals, logging and governance.
A locally operated model is not automatically secure or compliant. We do not currently install, host or operate AI models.
- Overview of AI applications and data flows
- Risk assessment with priorities
- Targeted tests, e.g. for prompt injection and data leakage
- Recommendations for permissions, approvals and logging
- Training for staff and management
Meet requirements
We clarify what applies to you and implement it in a structured, traceable way. Our regulatory content focuses on Austria; for organisations in Germany, the respective national implementation applies.
- Information security management system (ISMS) under ISO/IEC 27001 – from gap analysis to certification
- NIS2 in Austria (NISG 2026): applicability, registration, measures, reporting
- Technical and organisational measures under the GDPR (no legal advice)
- EU AI Act and ISO/IEC 42001
- Supply chain security
Ongoing support
Security has to work every day – not only during a project.
- Managed cyber security: firewall, antivirus, patch management and security operations to the agreed extent
- External information security officer (vCISO)
- Security awareness training and talks
- Incident response plans, reporting processes and tabletop exercises
- Business continuity management under ISO 22301 and BSI Standard 200-4
Security incident or specific suspicion?
If you have a security incident or a specific suspicion, you can reach us through our regular contact channels. Together we will clarify what support we can provide and whether further specialists are needed. We do not offer 24/7 on-call service or guaranteed response times.
Which service fits?
We clarify it in a free 30-minute intro call – on site or remotely.