Networks · Data centres · Cybersecurity

Networks that stay up.

We design, build and run networks and data centres for companies that cannot afford downtime. Redundancy, monitoring, and an engineer who comes on site when needed.

Book a consultation What we do

Network simulationOSPF · ECMP

Nodes online: –
Active flows: –
Availability: –

VRRPv3RFC 5798
FortiGateHA cluster
UniFiShadow Mode
OSPFRFC 2328
BGP-4RFC 4271
VLANIEEE 802.1Q
LACPIEEE 802.3ad
802.1Xaccess control
WireGuardVPN
WazuhSIEM
SuricataIDS/IPS
Zeektraffic analysis
CrowdSecattack blocking
AkvoradoNetFlow / IPFIX

Core business

Networks are the foundation of everything we do

We design and manage business networks with equipment from various vendors. We build them so that the failure of one device does not stop operations.

High availability: VRRP, FortiGate HA clusters, UniFi Shadow Mode, redundant uplinks, link aggregation and backed-up power. Tailored to what must never stop.
Design and delivery: Topology, VLANs, routing (OSPF, BGP), Wi-Fi coverage. We supply the hardware, install and test it, and hand over documentation.
Management and monitoring: Availability and performance monitoring, configuration backups, firmware updates and controlled changes with a rollback plan.
Network security: Segmentation, firewall policies, VPN (IPsec, WireGuard), secure remote access and separation of OT networks in production.

MikroTikFortinetCiscoHPE ArubaUbiquitiWatchGuard

# Primary router, virtual gateway 10.0.10.1
/interface vrrp add name=vrrp10 \
    interface=bridge-lan vrid=10 \
    priority=120 preemption-mode=yes
/ip address add address=10.0.10.1/32 \
    interface=vrrp10

# Backup router: same vrid, priority=100

# Active-passive cluster of two FortiGates
config system ha
    set group-name "core-ha"
    set mode a-p
    set hbdev "ha1" 50 "ha2" 50
    set override enable
    set priority 200
end

# Two UniFi Dream Machines in Shadow Mode
UDM-01   role=primary   state=active
UDM-02   role=shadow    state=standby

# The shadow keeps a synchronised configuration
# and takes over when the primary gateway fails,
# using the same gateway IP address.

That is the core of redundancy. The rest is design, failover testing and monitoring.

Data centres

From an empty room to live operation

We build server rooms and data centres turnkey. We design redundant power, cooling and connectivity, and hand over documentation down to the individual port.

A + B power: Two independent power feeds, UPS, metered PDUs and generator readiness.
Cooling: Contained hot and cold aisles, precision air conditioning and temperature sensing right in the rack.
Cabling: Fibre and copper as needed, 1G, 10G and 40G (SFP+, QSFP+). Labelled, tested and documented.
Environment monitoring: Temperature, humidity, flooding, room access and cameras in a single monitoring view.

Rack elevation · example

The racks are fed from two independent power feeds. Critical devices are duplicated in HA pairs (dashed links), so if a whole rack fails, the other one takes over. Non-critical devices without a replica wait for the repair.

Services

From cabling to 24/7 monitoring

Beyond networks and data centres, we look after your whole IT: servers, security, support and connecting production.

Service and on-call support

Regular maintenance and 24/7 emergency call-outs to critical infrastructure in the Olomouc Region. Response times are agreed by contract to suit your operation.

SLA24/7 on-siteDiagnostics

IT outsourcing and L2/L3 support

We take over the management of your IT, or back up your own IT team with second and third-line support and help with complex escalations.

OutsourcingL2/L3IT management

Cybersecurity

Security audits, penetration testing of applications and infrastructure, hardening. We don't just find the problems, we fix them too.

AuditPentestHardening

NIS2 and the Cybersecurity Act

We find out whether the regulation applies to you and guide you through registration, risk analysis, security measures and documentation.

How we work →

SOC and firewall as a service

24/7 security event monitoring and a firewall we look after for a monthly fee. On enterprise platforms of your choice, or on our own SIEM built on open source.

How it works →

Servers, virtualisation and GPU

Hypervisors, storage and backups with tested restores, automation with Ansible. We also build and run GPU clusters for compute and AI.

VirtualisationBackupsGPU

Industry and automation

Robots and PLCs, line automation, IoT sensors and measurement, computer vision and software for AI-controlled drones. The OT network stays separated and protected.

Examples from the field →

Software and AI development

Custom applications, system integration and firmware. AI assistants on internal data and document processing, deployable on your own hardware with control over where your data goes.

ApplicationsLLMOn-premise

SOC · SIEM · Firewall as a service

We see what happens in your network

For our contract customers we collect events from firewalls, servers and network traffic around the clock, 24/7, evaluate them and respond to attacks. The technology depends on what the customer wants: we work with enterprise solutions such as Fortinet, WatchGuard or Ubiquiti, and we also run our own SIEM on proven open source tools, with no licence fees based on log volume. We keep extending it as new technologies and threats appear, most recently with monitoring of commands in the Modbus industrial protocol.

Sources
What we monitor

Firewalls, switches, servers, workstations, VPN, cloud services and OT networks in production.
Detection
Collection and analysis
- SuricataIDS/IPS on network traffic
- Zeekrecords of DNS, TLS and other connections
- AkvoradoNetFlow / IPFIX flows
- Wazuhagents on servers and workstations
Correlation
SIEM

We put events into context. Rules filter out the noise, so an engineer gets the suspicious behaviour, not a thousand lines of logs.
Response
Action
- CrowdSecautomatic blocking of attackers
- Engineerinvestigates and resolves the incident
- NIS2input for incident reporting

Firewall as a service

A firewall you don't have to think about

We supply, configure and manage the firewall for a monthly fee. You focus on your work, we take care of the rules, updates and outages.

Rules and VPN management: changes on request, documented and reversible.
Updates and backups: firmware and configuration kept current, with no effort on your side.
Connected to the SOC: we monitor traffic through the firewall and block suspicious addresses.
High availability: optionally as an HA pair, so one failed device doesn't stop operations.

NIS2

NIS2 without the panic

The Czech Cybersecurity Act (No. 264/2025 Coll.), which transposes the NIS2 directive, applies to thousands of companies that previously had no obligations at all. We take you through it step by step and put the technical measures in place along the way.

Assessment
We determine whether, and under which regime (lower or higher obligations), the act applies to you, and help you register with NÚKIB, the Czech cybersecurity agency.
Gap analysis
We compare your current IT and OT infrastructure against the requirements of the implementing decree.
Risk analysis
We map assets, threats and impacts, and decide what to protect first.
Implementation
Segmentation, MFA, logging, backups, supplier management, policies and roles.
Operation and monitoring
Incident detection and reporting, regular reviews and staff training.

Our measures don't stay on paper. We configure and manage the network, firewalls and backups the decree requires ourselves. We can also help you prepare for ISO/IEC 27001 or IEC 62443 for industrial networks.

Check whether NIS2 applies to you

Industry, agriculture and measurement

Technology where things are grown and made

We install and commission sensors, control systems and larger technology equipment, and connect them to a reliable network and monitoring.

Greenhouses: horticultural LED lighting with a spectrum tuned to the crop, temperature, humidity, CO₂ and light sensors, control of ventilation, shading and irrigation.
Air quality on site: continuous monitoring of tVOC, eCO₂ and hydrocarbons.
Installation: larger equipment and technology, including cabling, connection and commissioning.
Manufacturing: automation of CNC machines and lines, collaborative robots, machine data collection and production optimisation.
Connectivity in the field: LoRaWAN, outdoor Wi-Fi links and LTE backup for remote sites.

Sensor monitoringsample data

Air temperature: 23.4°C
Rel. humidity: 71% RH
CO₂: 820ppm
PAR light: 460µmol/m²/s
Grow LEDs: 65% output
Substrate moisture: 29% vol.

Low substrate moisture started irrigation circuit 2. The LEDs top up the light based on current daylight.

FAQ

Questions we often hear

Who do you work for?

For companies and organisations, not consumers. For example, for manufacturers in mechanical engineering and petrochemicals, greenhouse growers, and companies with multiple sites that need a reliable network and monitoring.

Do you provide emergency call-outs and SOC to anyone?

No. 24/7 emergency call-outs with a guaranteed response time, 24/7 SOC monitoring and firewall as a service are provided to our contract customers under a service level agreement (SLA). Other requests are handled according to our current capacity.

Where do you operate?

We are based in Olomouc and work on site across the Olomouc Region, where we also provide 24/7 emergency call-outs.

Does NIS2 apply to our company?

It depends on your sector, company size and the services you provide. We assess whether and under which regime the act applies to you, and help with registration with NÚKIB and with putting the measures in place.

Do you issue ISO/IEC 27001 certification?

No. We help companies prepare for ISO/IEC 27001 and for IEC 62443 for industrial networks, and we implement the technical measures ourselves. The certificate itself is issued by an accredited certification body.

Which network vendors do you work with?

MikroTik, Fortinet (FortiGate), Cisco, HPE Aruba, Ubiquiti (UniFi) and WatchGuard. We build high availability with VRRP, FortiGate HA clusters, UniFi Shadow Mode, redundant uplinks and link aggregation.

What do you build your SOC and SIEM on?

On whatever the customer prefers. We handle enterprise solutions and have experience with Fortinet, WatchGuard and Ubiquiti, among others. We also run our own SIEM on proven open source tools (Wazuh, Suricata, Zeek, CrowdSec, Akvorado), where customers pay no licence fees based on log volume. Monitoring runs 24/7.

Can you handle electrical work and cooling in a data centre?

Yes, as part of the project. Electrical installation and inspections are carried out by licensed electricians and inspectors, and cooling is installed by a trusted partner. We design the whole solution and coordinate it through to handover.

Outage? Call us.

For our contract customers in the Olomouc Region we provide 24/7 emergency call-outs to critical infrastructure with an agreed response time.

On-call line+420 775 968 901

About us and contact

Engineers from Olomouc

Stable & Secure is an engineering company that brings together network infrastructure, security and automation. We handle our projects ourselves from design to operation, so we know what we built and we stand behind it. We operate across the Olomouc Region.

Write or call us in English or Czech. At the first meeting we go through what you need and propose the next steps.

Miroslav Kočí

+420 775 968 901 koci@stablesecure.cz

Pavel Maňák

+420 773 613 514 manak@stablesecure.cz

Stable & Secure s.r.o. Jiráskova 297/14, 779 00 Olomouc, Czech Republic Company ID 07549911 · VAT CZ07549911 Registered in the Commercial Register at the Regional Court in Ostrava, section C, file 76222 info@stablesecure.cz