Solution · Defend against cyberattacks

Attacks hit companies of every size today. The question is not if – but whether you would notice.

Cyberattacks cause around €202 billion in damage in Germany every year – part of €289 billion in total economic damage (Bitkom 2025), and a third of companies have already been hit by ransomware. Installed software alone does not protect you – protection comes from operations: monitoring, patching, responding. That is exactly what we do.

What a successful attack costs

Downtime

Production, logistics, administration – with ransomware, everything typically stands still for days. Every day of downtime costs a multiple of a year of managed security.

Extortion & data theft

Modern attackers do not just encrypt – they steal data and threaten to publish it. Paying demonstrably does not protect you from the next attack.

Reputation & liability

After an incident, customers, insurers and regulators all ask the same question: “What measures did you have in place – and can you prove it?”

Free quick check

How resilient are you? 6 questions, 2 minutes.

An honest quick test along the typical attack chain – anonymous until you see your result.

The solution

Defence in six layers – operated, not just installed

Attackers need one gap; you need a system. Each layer is a managed service with monitoring, patching and reporting included.

1 · Email security

Email is the number-one entry point for attacks. We filter out phishing, malware and CEO fraud before they reach the inbox – with Hornetsecurity or NoSpamProxy.

Technical details: mail security →

2 · Endpoint protection

Every laptop is a door into your company. Managed endpoint security with ESET: centrally managed, alerts actively handled, full-disk encryption included.

Technical details: endpoint security →

3 · Network & firewall

Managed firewall based on WatchGuard: continuously patched, rules maintained, anomalies monitored – as a Gold and Training Partner we know the platform inside out.

Technical details: managed firewall →

4 · Applications & APIs

Web shops, portals and interfaces are direct attack surfaces. Application security & delivery with F5 protects what your business presents to the outside world.

Technical details: application security (F5) →

5 · Detect & respond

SIEM & SOAR with Logsign plus the Enginsight security platform: attacks are detected, correlated and answered – not first noticed on Monday morning.

Technical details: SIEM & SOAR →

6 · The last line of defence: backup

When everything else fails, your backup decides between weeks of downtime and hours to recovery. Managed backup with NovaStor – ransomware-proof and restore-tested.

Technical details: managed backup →

Why mosaic IT?

Operations, not boxes

We do not sell boxes. Every layer is monitored, patched and reported on by us – for us, protection is a process, not a product.

Assess first, buy second

The IT health check shows which layers you are actually missing. You invest where the risk is greatest.

Vendor-level expertise

WatchGuard Gold & Training Partner, ESET partner, solid expertise in email security – we know our platforms from the engine room.

From the field

What the outcome looks like

Reference project: automotive dealership group, 5 sites, approximately 450 users

Starting point: A grown IT landscape with flat networks secured differently at each site – no consistent protection standard.

Solution: Replacement of all firewalls with WatchGuard clusters, network segmentation, Hornetsecurity for email security, multi-factor authentication plus the WatchGuard services MDR (Managed Detection & Response) and NDR (Network Detection & Response).

Result: All five sites on a redundant, uniform standard; anomalies on endpoints and in the network are detected proactively. mosaic IT has been running the firewalls as a managed service ever since – monitored, patched, documented audit-ready.

The difference when it matters

Attack phase Without managed security With mosaic IT
Phishing email arrives Lands in the inbox – the employee decides Stopped by the filter, simulation training in place
Malicious code runs Antivirus raises a flag – nobody looks Endpoint blocks it, alert is actively handled
Attacker moves through the network Unnoticed, often for weeks SIEM detects anomalies, response follows the runbook
Encryption begins Backups often encrypted along with everything else Ransomware-proof backups, rehearsed recovery
Afterwards Forensics, reporting chaos, loss of trust Documented incident, report filed on time, lessons learned

Frequently asked questions

We are too small to be a target – right?
Attacks are automated: bots scan for vulnerabilities, not company names. Mid-sized businesses are popular targets precisely because someone is less likely to be watching.

We already have antivirus and a firewall.
Installed is not the same as operated. The decisive questions: who patches? Who sees the alerts? Who responds at three in the morning? If the answer is “no one, really”, that is exactly the gap.

Do we need all six layers straight away?
No. The health check prioritises by your risk – we usually start with email, endpoint and backup and build from there.

What will it cost us?
Each component is available individually and modularly – we prepare your individual quote in a free initial consultation. For comparison: a ransomware incident typically costs a mid-sized business a multiple of a year’s managed security budget.

Does this help with cyber insurance and NIS2 too?
Yes – insurers and regulators demand the same evidence: MFA, backup tests, monitoring, response processes. Our reports cover both.

Further reading

PDF report

Cybersecurity Benchmark Report 2026

10-min read · with self-check

How does your security compare with German mid-sized businesses? Based on BSI and Bitkom data.

Download the free report
eBook

Understanding endpoint security

PDF · concise and clear

Why yesterday’s antivirus is no longer enough – and what matters in modern endpoint security.

Download the free eBook

Before an attacker puts it to the test – we do

In a free initial consultation we work out which layers of protection you are missing and where you can reduce risk fastest.

Free IT health check

Where does your IT really stand? Our structured IT health check reveals risks, gaps and opportunities – concise, clear and with no strings attached.

Go to the IT health check →