OPNsense decides what gets through; Strega Defence recognises threats, acts and tells you what it has done. Here is what happens behind the scenes, with no need to understand it to use it.
The only passage between the office and the internet. It closes what is not needed, lets everyday work through and watches the traffic.
Collects events, puts them in order, links them together and turns them into understandable alerts. Keeps the Log.
Alerts arrive on the phone; on the computer you see network status, history, log and available actions.
The connection goes from the Box to the platform: no inbound port is opened in the office. The goal is to see an event in the console within 60 seconds in 95% of cases.
They work together inside the Box and in the apps: the client does not have to install or configure anything.
Continuously watches what happens on the network: connections, blocks, login attempts, internet line status. It puts signals in order, discards the noise and recognises the situations to report.
Where you see it: Network status in the web app
Sends a message when needed, with what happened, how serious it is and what to do. It never repeats the same alert ten times.
Where you see it: Mobile app, email, web app
Records who did what and when: logins, decisions, changes. It is the evidence to show a client, an auditor or the data protection authority, and it feeds the periodic report.
Where you see it: Web app, periodic report
Acts automatically when needed: blocks a website, a country or a login attempt, isolates a suspicious device from the network until a technician checks it. Every action is explained in a notification and kept in the Log.
Where you see it: Mobile app and web app
The initial detection rules, in plain words. They will be tuned together with the pilot programme clients.
The line drops or loses packets for several minutes: you know before anyone calls, and you know whether it is the provider's fault.
A computer tries to reach a domain known for spreading malware or stealing passwords: the connection is blocked.
Traffic shows the signs of a known attack, or the same device keeps repeating them: the alert goes out with the right severity.
Repeated failed attempts on the VPN or management panel, perhaps from an unusual country.
An interface saturated for too long, or an unusual spike towards the NAS where the files live.
Disk, memory, temperature, stopped services or outdated version: we take care of it.
A rule changed without going through Strega Defence triggers an alert straight away.
The reception PC tries to connect to an address known for spreading malware. The Box blocks the connection and isolates the PC from the rest of the network. The technician gets the alert, checks the PC and reconnects it once done. Everything stays in the Log.
The internet line drops three times in an hour, right while tax returns are being filed. Strega Defence reports it before anyone calls, and the owner already has the evidence to send to the provider.
Someone abroad tries the VPN password a hundred times. Strega Defence blocks access from that country and tells the owner, who does not have to do anything.
Looks after thirty offices from the same console and immediately sees which ones have an open issue. Works remotely, without travelling, and the periodic report shows clients the work done.
The examples are illustrative: messages and behaviour will be defined and verified during the pilot.
From the first meeting to a protected network usually takes two weeks, and the office is without internet for an hour at most. Indicative times, to be confirmed in the pilot programme.
We understand how the office works and which Box you need, One or Business.
A technician visits the office for about an hour: where the router is, where the Box goes, power and cabling. If something is missing, they say so straight away.
We prepare the Box in our lab with your office profile and test it for 24 hours before delivery.
At an agreed time the technician connects the Box and checks that everything works: internet, email, management software, certified email, printers. The office is offline for an hour at most.
A test report and half an hour with the owner and contact person: installing the app, reading an alert, using the web app.
In the first weeks Sentinel learns the office's habits and fine-tunes its alerts by itself. Then it works quietly.
Strega Defence is built on mature open source software reviewed by large communities. The value we add sits on top: interpreting events, explaining them, proposing the right actions and keeping track of them.
Privacy by default. The client is the data controller and we are the processor under Article 28 of the GDPR. Devices are pseudonymised in reports and browsing logs kept to a minimum; data is hosted in the European Union and deleted with certification at the end of the contract.
We will show you the web app and mobile app in a twenty-minute demo, from your phone.
