The questions we hear most
Grouped by where you are coming from. If your answer is not here, write or call us.
General
Where is our data?
With the cloud version, in a data centre in the Czech Republic, encrypted in transit and at rest. With your own server, it never leaves your network.
Can we try the system?
Yes. We deploy it on your traffic and it runs for 30 days on the full Complete edition, with no commitment.
How much does it cost?
Network Security from EUR 200 a month depending on network size, AI Audit from CZK 29,000 one-off. All prices are in the price list.
For internet providers
How long does deployment take?
The cloud version is deployed within 48 hours, the hardware appliance within a week, depending on device availability. For the cloud all you need is NetFlow or IPFIX export configured on your routers; for the appliance we need rack space and access to a mirrored interface.
What load does the system handle?
Up to 100 Gbps. Collection can be split across multiple probes and collectors, across sites and data centres — the architecture grows with the network, so you do not have to size it up front.
How quickly does it recognise an attack?
From a mirrored interface, within seconds. Records from IPFIX and NetFlow v9 exporters arrive 15 to 60 seconds after a connection ends, depending on your router configuration — the system evaluates those too and marks them as late, so you can tell what is happening now from what happened a moment ago.
Will it report attacks that are not really attacks?
Sensitivity is set with a single control across four levels — from high for quiet networks to very low for backbone and transit, where only a genuinely large attack should raise an alert. Each individual threshold can be tuned separately, and addresses that must never trigger a response go on a whitelist.
What if a detection is wrong and the system starts blocking?
For every response you set the severity at which it triggers. The whitelist also works granularly — per IP, port or protocol, and separately for the LAN and WAN side. Active blackholes sit in one table and any of them can be withdrawn with a single click.
For business and public bodies
Is it the same system as for internet providers?
Yes. The same platform and the same features – just a smaller network and a different deployment.
Do we have to buy hardware?
No. In the cloud it is enough to set up an export from your router or firewall. Your own server makes sense when the data must not leave the network.
Do NIS2 obligations apply to us?
It depends on sector and size. For many mid-sized companies and municipalities, yes. We will tell you specifically in the consultation.
We have no in-house IT. Can we manage?
Yes. An external IT provider can connect everything in an hour, and we write results so the managing director understands them.
Will you see our emails or AI conversations?
No. We work with settings, metadata and scan results. We neither need nor store content.
What if our internet provider does not use Protectione?
The audit and AI Shield work without it. Only DDoS protection runs through the provider — we can offer them a partnership.
Protectione is not a law firm and does not provide legal services. Information on legislation is for guidance only.
AI Audit
Is this a statutory cybersecurity audit?
No. The AI audit is an expert review of AI use and related security risks. We do map the results to NIS2 obligations, so it helps with those too.
Will you see our emails, documents or AI conversations?
No. We connect to Microsoft 365 or Google Workspace read-only, for settings and access records. We neither read nor need any content.
Do we have to inform staff?
Yes — monitoring access to AI services is employee monitoring. We give you a template notice to adapt and send out.
How much of our time does it take?
Typically a 90-minute kick-off, an hour with your IT to connect services, short interviews with a few people and the results presentation. The rest is on us.
What if we cannot fix the findings right away?
The remediation plan ranks findings by severity. We recommend fixing critical ones within 72 hours and the rest step by step. With AI Shield Monitor you see what is done and your score improves as you go.
Protectione is not a law firm and does not provide legal services. Information on legislation is for guidance only.
AI Shield Monitor
What do we need to install?
The minimum is one click: read-only consent to connect Microsoft 365 or Google Workspace. For more detail, point your DNS to our resolver and have IT roll out the browser extension via Intune or Google Admin.
Where is our data?
In data centres in the Czech Republic. We do not use your data to train AI models.
Does AI Shield block AI?
Only if you set it to. The default mode warns. The aim is for people to use AI safely, not to stop using it.
Does AI Shield file notifications for us?
No. Your organisation remains the obliged entity. The app prepares a draft, tracks deadlines and keeps the evidence.
What if our ISP does not use Protectione?
Everything except the DDoS view works without it. We can also take DDoS data from your own flow export, or offer your ISP a partnership.
Protectione is not a law firm and does not provide legal services. Information on legislation is for guidance only.
Features
Deep traffic analysis, threat detection, mitigation and regulatory support over a single data set. Learn more →
NIS2
The Czech Act No. 264/2025 has applied since 1 November 2025 and covers thousands of organisations – internet providers, companies and public bodies. Here is, in plain terms, who it applies to, what it asks and how Protectione guides you through it. Learn more →
DDoS protection
The system recognises an attack, names it and can stop it before it fills your link – via RTBH or FlowSpec at your upstream peer. Learn more →
Flow monitoring
Collection from NetFlow v9, IPFIX and port mirroring, with context from the ASN database and global threat sources. All on the same data, on one screen. Learn more →
Technical solution
The same platform, the same features, the same dashboard. All that differs is where the system runs and who owns the hardware. Learn more →
Pricing and SLA
A subscription sized to your network, hardware sized to the disk array, and clearly stated prices for SLA and data export. Learn more →
For internet providers
Flow monitoring, data retention, threat intelligence, vulnerability scanning and NIS2 reporting run on a single platform. Stop an attack at your upstream with RTBH, and have the regulator's report pre-filled before you start writing it. Learn more →
For business and public bodies
The platform we build for internet providers also watches a company network: you see the traffic, recognise an attack and have the evidence the Cybersecurity Act asks for. Plus an audit and monitoring of how AI is used. In plain language, with evidence for inspections and for your customers. Learn more →
We show it to you on your own network
Internet providers get a 45-minute online walkthrough of the system. With companies and public bodies we start with a free 30-minute consultation.