12 min
Incident response time cut from 8 hours to 12 minutes
We built a SOC, connected 40+ event sources, introduced playbooks and 24/7 duty shifts.
We seethe attackbefore ithappens
Our monitoring center in Tashkent analyzes events from your systems around the clock and stops attacks in minutes, not days.
- SOC on duty
- 24/7SOC on duty
- organizations protected
- 150+organizations protected
- incident response
- <15 minincident response
Made in Uzbekistan
IT-HUNTER's own products
We don't just deploy vendor solutions — we build our own. Our team's four products cover everything from network protection to staff training, and they run inside your organization.
NET HUNTER
Shows which program on a computer goes online, and where to. Suspicious activity is found in minutes.
Learn moreDNS Shield
Blocks dangerous websites for the whole network at once: for providers, offices and families.
Learn moreCyber Range
A training ground where your team learns to fight off real attacks with no risk to the company.
Learn moreFenix Messenger
A company messenger: no outsider can read your chats or listen to your calls, not even the server administrator.
Learn moreIT-HUNTER's core focus
We bring foreign vendors to the Uzbek market
Cybersecurity products for government agencies and critical information infrastructure (CII) facilities must be certified at the Cybersecurity Center. We prepare the product, documentation and source code, represent the vendor in Uzbekistan and support testing all the way to the certificate.
- Product assessment and choice of certification scheme
- Document package in Russian and Uzbek
- Preparing source code and installation packages for testing
- Testing support and resolution of findings
Hands-on defense, not boxed products
Three things a typical integrator doesn't have: our own cyber range, our own AI analytics and a 24/7 monitoring center.
Cyber range
Our own facility with 30–40 workstations: real attacks, real teams, drills until the response becomes second nature.
In-house AI analysis
Behavioral analysis models and a malware archive that catch what signatures miss.
SOC 24/7
A monitoring center with duty shifts, response playbooks and a measurable SLA.
A ransomware attack takes less than a day. We break the chain at step three.
The timeline of a typical incident in Central Asia, based on our investigations. Once the host is isolated, steps 4 and 5 never happen.
VPN login
A contractor account without a second factor.
Credential theft
Credentials dumped from server memory.
IT-HUNTER isolates the host
A SOC analyst blocks the session and the account 15 minutes after the alert.
Backup deletion
Did not happen.
Encryption and ransom
Did not happen.
Why clients come to us
Pick the situation closest to yours. We'll show what we do in the first hours and what happens next.
We've been encrypted
Ransomware has stopped the business. Isolation, recovery, investigation and protection against a repeat attack.
Incident responseOur data has leaked
A customer database or documents ended up outside. We find the channel, close it and deploy DLP.
Leak investigationEmployees click on phishing
Staff training, attack simulations on the cyber range, email filtering and link analysis.
Awareness programAn administrator is compromised
Privileged session control, PAM, activity recording and instant access revocation.
Access controlWe're failing an audit
Certification of information systems, ISO 27001, PCI DSS and Uzbekistan regulatory requirements.
Certification readinessWe can't see what's going on
No monitoring, no logs. We build a SOC, connect event sources and write detection rules.
SOC buildSolutions
22 security services: from audit and pentest to your own SOC and software certification readiness.
- XDR / EDRReal-time endpoint monitoring with automatic isolation of infected devices.15 min response
- PAMRecording and control of administrator sessions, just-in-time access, protection against insider threats.30 min response
- DLPControl of web, email, USB and printing, data classification and leak investigation.1 h response
- SIEM / SOC24/7 event collection from all sources, correlation, playbooks and regulatory reporting.15 min response
- Audit and pentestExternal and internal pentest, social engineering, code review, report with CVSS scores.per contract
- Ransomware protectionBehavioral detection, immutable backups, segment isolation and a recovery plan.15 min response
- Phishing protectionFiltering of all inbound email, attack simulations, employee training, DNS protection.real time
- Zero-day protectionBehavioral analysis, a sandbox for suspicious files, signatureless blocking.5 min response
- NGFW / WAFDeep traffic inspection, web application protection against the OWASP Top 10, geo-blocking.real time
We know your industry
A bank and a factory have different regulatory requirements, critical systems and threat models, so the approach differs too.
Banking and fintech
PCI DSS, anti-fraud, protection of core banking and remote banking systems.
Public sector
Certification of information systems, regulatory requirements, protection of government information systems.
Industry and energy
ICS protection, OT network segmentation, control of contractors and remote access.
Retail and e-commerce
Payment data protection, WAF, defense against bots and customer database leaks.
Telecom
24/7 monitoring, subscriber data protection, resilience to DDoS and APT campaigns.
Healthcare
Medical data protection, network segmentation, backup and recovery.
Results in numbers
What changed for clients after deployment. Company names are disclosed on request and with their consent.
0
Zero successful ransomware attacks in 24 months
XDR on 2,400 endpoints, network segmentation and isolated backups.
−87%
87% fewer clicks on phishing links
Cyber range exercises for 600 employees: four waves of simulations with mistake reviews.
Under attack right now?
24/7 incident response. We isolate the threat, stop it from spreading, restore operations and find the root cause.
IT-HUNTER is an information security and cybersecurity company
We protect organizations in Uzbekistan from modern cyber threats, from infrastructure assessment to round-the-clock response.
Strategic partnerships with leading global vendors let us offer the best solutions on the market. Cyber Park Uzbekistan resident.
- Cyber Park Uzbekistan resident
- ISO/IEC 27001
- PCI DSS
- Certification of information systems
- CISSP, OSCP, CEH
- organizations protected
- 150+organizations protected
- years on the market
- 10+years on the market
- strategic partners
- 12strategic partners
- audits completed
- 300+audits completed
Head of SOC
CISSP, 12 years in monitoring and response
Lead penetration tester
OSCP, OSCE, red teaming and application testing
Security architect
CISM, protection of large-scale infrastructures
Threat analyst
GCTI, reverse engineering and threat intelligence
Insights
Our analysts' observations on threats in Uzbekistan and Central Asia.
Threat report, 28 July 2026
Ransomware in Central Asia: what changed over the year
Initial access to encryption now takes less than a day. We break down the chain and the points where it can be broken.
Read articleAnalysis, 15 June 2026Phishing in Uzbek and Russian
Emails in local languages that mention government agencies and banks get several times more clicks. Data from our cyber exercises.
Read articlePractice, 2 May 2026Where to start a SOC on a limited budget
Not with buying a SIEM. A sequence of steps that gives you visibility into your infrastructure in the first weeks.
Read articlePartners and clients
Strategic partners
- Kaspersky
- FUDO Security
- Falcongaze
- Tenable
- Fidelis Security
- Positive Technologies
- Axoft
Trusted by
- Davekosertifikat
- Ecohayot
- Aurisgreentech
- Uzcosmos
- Moore CA
Cybersecurity in Tashkent and across Uzbekistan
IT-HUNTER is a cybersecurity center (Kiberxavfsizlik Markazi) in Tashkent.
Cybersecurity in Uzbekistan
The full cycle: assessment, audit, XDR/EDR, DLP, PAM, NGFW/WAF, SIEM and certification readiness.
Security servicesCybersecurity in Tashkent
Office and engineers in Yakkasaray district. On-site visits, 24/7 response, support in Russian and Uzbek.
Get in touchFor business
Banks, public sector, industry, telecom, retail. Kaspersky, Fidelis, FUDO and Positive Technologies licenses.
Licenses and solutionsKiberxavfsizlik markazi
SOC 24/7, kiberhujumlarga javob berish, kiberpoligon mashqlari va xodimlarni o‘qitish — Toshkent shahrida.
KiberpoligonFrequently asked questions
A short overview of how we work with companies in Tashkent and across Uzbekistan.
Where should a business start?
With an audit: we assess your infrastructure, evaluate risks and existing security controls, and then give you a roadmap with priorities and a cost estimate.
Which services are available on-site in Tashkent?
All of them: audit and pentest, deployment of XDR/EDR, DLP, PAM, NGFW/WAF and SIEM, SOC build, 24/7 incident response and cyber range exercises.
Kiberxavfsizlik Markazi — bu nima?
Kiberxavfsizlik markazi (SOC) — infratuzilmani 24/7 kuzatuvchi va kiberhujumlarga javob beruvchi markaz. IT-HUNTER uni loyihalashtiradi va ishga tushiradi.
Can I buy a Kaspersky license through IT-HUNTER?
Yes. We supply official Kaspersky business licenses, handle renewals, and deploy and support them in Russian and Uzbek.
How much do your services cost?
It depends on the number of endpoints, servers and sites, and on the SLA level. The initial assessment is free, and our estimates are transparent.
How fast do you respond to an incident?
The emergency line works around the clock. For managed service clients, we guarantee a response to a critical incident within 15 minutes.
Do you work with government agencies and banks?
Yes, we have projects in the financial, public, industrial and telecom sectors, including certification of information systems.
What is a cyber range?
A facility for hands-on cyber exercises: teams practice responding to ransomware, phishing and insider leaks. The exercises show real detection and response times.
Get a free consultation
We reply within 24 hours. If you are under attack right now, call the emergency line.
+998 93 238 23 38info@ithunter.uz3 Karakum Street, passage 3, Yakkasaray district, Tashkent