Telecom operators
Protection for all fixed and mobile subscribers, tariff binding via RADIUS (BRAS/PGW) and a new "Safe internet" service.
In-house development
IT-HUNTER products
Four software products built by the IT-HUNTER team in Tashkent. Each closes a specific security problem and runs entirely inside your infrastructure.
What problem do you want to solve?
Pick a situation your team knows well and see how our product addresses it.
NET HUNTER
We don't know which program on a computer is talking to an external server
How we solve it
NET HUNTER links every connection to a device, user, process and executable. You see not just an IP address but the specific program, its path, SHA-256 hash and digital signature status.
What you get
- A suspicious process is found in minutes
- Unsigned and unknown programs are visible immediately
- A confirmed domain for every connection
NET HUNTER Traffic Control Platform, version 1.0.0
NET HUNTER
See not just the connection, but who opened it, with which process and why
A program that shows which programs on your company's computers go online, and exactly where they connect.
- It's like
- A visitor log at the front desk: you see not only that the door was opened, but who opened it, when and why.
- Who needs it
- Companies that need to quickly find out where suspicious network activity came from.
- A suspicious program is found in minutes, not days
- The system does not read employees' messages or passwords
- All data stays inside the company
A firewall shows the destination address but doesn't answer the key investigation question: which user, which process and which executable made the connection. NET HUNTER provides a verified link between a network event and its source on Windows computers.
- Device
- WS-ACC-07
- User
- CORP\a.karimova
- Process
- powershell.exe PID 7412
- Parent
- rundll32.exe PID 6980
- File
- C:\Users\Public\upd.ps1
- SHA-256
- 9f2c…e41a
- Signature
- none
- Domain
- cdn-update-check[.]com
- Destination
- 185.x.x.17 : 443 / TCP
Rule: unsigned process + first-seen domainIncident created, on-duty analyst assigned
- Windows AgentCollects network and DNS events using built-in Windows mechanisms (ETW), with no kernel driver
- Secure channelgRPC over TLS 1.3 with mutual authentication and a unique certificate per device
- Queue and storageNATS JetStream, ClickHouse for telemetry, PostgreSQL for management
- Rules and incidentsDeterministic rules, alerts and incident cards
- Operator consoleSearch, investigation and 14 report types in CSV, XLSX and PDF
Hands-on training and cyber exercise platform, version 1.0.0
Cyber Range
Isolated infrastructure where your team practices against real attacks
A training ground where employees and specialists learn to fight off real cyberattacks in a safe copy of the company.
- It's like
- A flight simulator for pilots or a fire drill — only for cyberattacks.
- Who needs it
- Organizations that want their people to know what to do when an attack happens.
- The team trains with no risk to real systems
- Management gets an objective view of how ready the team is
- You can test security tools before buying them
Lectures and slide decks don't teach people to respond. Cyber Range deploys training infrastructure with workstations, servers, Active Directory and security tools, launches an attack scenario and objectively scores participants' actions based on recorded events.
- Detection
- 18 min
- Host isolation
- 24 min
- Score
- 84/100
- Environment from a templateVirtual machines, networks, accounts and policies are deployed automatically
- Scenario engineThe attack follows fixed or branching logic depending on participants' actions
- TelemetryEndpoint Agent, network sensor and SIEM, EDR, DLP and IDS events on a single timeline
- Automatic scoringCorrect, wrong, missed and late actions measured against checkpoints
- Debrief and reportA local AI explains mistakes and prepares recommendations
Secure corporate communications platform, version 1.0.0
Fenix Messenger
Your organization's own messenger with on-device encryption
Your company's own messenger for chats, files and calls, running on your own server.
- It's like
- A familiar messenger, except only the people in a conversation hold the keys to it.
- Who needs it
- Organizations that don't want to keep work conversations in public messengers.
- No outsider can read your chats, not even the server administrator
- A lost phone can be cut off in a minute
- Chats, files, calls and video meetings in one place
Employee conversations in public messengers are stored on someone else's servers. Fenix is deployed inside your organization: messages and files are encrypted on the sender's device, and the server stores only encrypted content.
Sender
Contract approved, file attached
Organization's server
Recipient
Contract approved, file attached
- Sender's deviceMessages and attachments are encrypted before sending; keys never leave the device
- Organization's serverStores encrypted objects and releases them only after an access check
- Recipient's deviceDecryption happens only in the client app
DNS security platform for providers, businesses and families
DNS Shield
Blocks a threat before the device even connects to a dangerous site
Protection that stops devices from opening dangerous websites: phishing pages, viruses or scam sites.
- It's like
- A guard who checks the address before you walk through the door.
- Who needs it
- Internet providers, companies and families who want safe internet without installing any software.
- Every device on the network is protected at once
- You can turn on a filter for children
- Nothing needs to be installed on phones or computers
A phishing page, a command-and-control server, a malware download: almost every attack starts with a domain lookup. DNS Shield checks every DNS query and stops dangerous ones before a connection is established, for telecom subscribers, company employees and home users alike.
- Total queries
- 1,284,512
- Allowed
- 96.8%
- Blocked
- 2.9%
- Malicious
- 0.3%
Policy matrix
| Basic | Family | Corporate | |
|---|---|---|---|
| Whitelist | ✓ | ✓ | ✓ |
| Threats | ✓ | ✓ | ✓ |
| 18+ | — | ✓ | — |
| Gambling | — | ✓ | — |
DNS Shield for three segments
One platform, three ways to use it. Policies are configured as profiles and applied to each subscriber automatically.
Businesses (B2B)
A corporate profile for offices and branches: threat blocking and event forwarding to the company's SIEM.
Home users (B2C)
A family profile: protection against phishing and malware, plus filtering of adult (18+) and gambling content.
- DNS queryA subscriber's or employee's device looks up a domain
- Subscriber and profileThe subscriber and their tariff are identified by the IP session from RADIUS Accounting (BRAS/PGW)
- RPZ zonesWhitelist → threats → content categories
- Response or blockA safe domain is resolved, a dangerous one is blocked
- Log and alertsEvents go to the log, alerts, reports and the SIEM
What all our products have in common
Your data stays with you
The server side is deployed within your infrastructure. There is no mandatory data transfer to external clouds.
Secure by default
Mutual TLS authentication, Argon2id, role separation and an immutable audit log.
Developed in Tashkent
Development, support and customization to customer requirements are handled by our own team.
See our products on your infrastructure
We'll run a demo, deploy a pilot within your infrastructure and adapt the product to your requirements.
Request a demo