Five systems, one dashboard, one database.
Flow monitoring, data retention, threat intelligence, vulnerability scanning and NIS2 reporting run on a single platform. Stop an attack at your upstream with RTBH, and have the regulator's report pre-filled before you start writing it.
How many systems are you running today?
A typical ISP runs five separate tools, five licences and five places to look for context. Every additional system adds complexity, integration cost and the risk that something falls between them.
Flow monitoring
Its own collector, its own database, its own licence.
Data retention
A legal obligation handled by yet another system and yet another storage tier.
Threat intelligence
Feeds downloaded somewhere and evaluated somewhere else — not where the flows are.
Vulnerability scanner
Another tool, another console, another report nobody connects to network operations.
NIS2 records
Spreadsheets, shared documents and deadlines tracked by hand.
Designed for network operators
For internet service providers and network infrastructure operators — not a general security tool that discovered ISPs later.
Regional ISPs
Providers running their own network infrastructure across a region.
Municipal operators
Operators of municipal networks and metropolitan fibre infrastructure.
Telcos
Telecommunications operators with complex backbone infrastructure.
Data centres
Colocation and cloud infrastructure operators.
Critical infrastructure
Connectivity providers for critical government and industrial networks.
What you will not get elsewhere in one package
DDoS protection
The system recognises an attack and stops it at your upstream peer via RTBH or FlowSpec – before it fills your uplink. Learn more →
Flow monitoring, RPKI and ASN
Every flow with its reputation, owner and path. 140,315 ASNs, RPKI validation and prefix hijack detection. Learn more →
NIS2 incident reporting
A guide based on the Czech Act No. 264/2025: your regime, the deadlines and pre-filled reports. Learn more →
Data retention
Traffic data on a server in your own network. The data never leaves the rack. Learn more →
Not a calendar of deadlines. A guide to what the law asks of an ISP.
The module goes beyond the general wording of the directive. It implements the Czech transposition — Act 264/2025 Coll. and decrees 409/2025 and 410/2025 Coll. — in detail. The framework of obligations is the same across the EU; we adapt the module to other national transpositions.
A subscription scaled to the size of your network
Price follows the number of ISP subscribers. No hidden fees. Prices exclude VAT and apply to the 500–1,000 subscriber band; larger networks are priced by band.
Start
- Flow monitoring
- Data retention (statutory minimum)
- NetFlow / IPFIX collection
- Basic reports
Advanced
- Everything in Start
- Threat intelligence
- Attack Map and Live Feed
- NIS2 core support
- Vulnerability scan
Complete
- Everything in Advanced
- Vulnerability management
- Automated response (RTBH, FlowSpec)
- Full NIS2 reporting
- RPKI, BGP and ASN analysis
- Priority place in the support queue
Prices for larger networks, the hardware appliance, SLA and data export are in the full price list.
AI security — for companies and for your business customers
Companies adopt ChatGPT, Copilot and AI agents faster than they can secure them. Same technology, same team, a new product.
AI Audit
In 2–6 weeks we find out which AI tools a company uses, where data goes and how attackers could get in. From CZK 29,000. About the AI audit →
AI Shield Monitor
Continuous oversight on the web, desktop and mobile: shadow AI, sensitive data, leaked keys, DDoS. Beta from March 2027. About AI Shield →
For ISP partners
Offer AI Shield to the businesses you connect. 30 % commission on paid amounts, and DDoS data from your Protectione installation with no box at the customer.
What people ask most
How long does deployment take?
The cloud version is deployed within 48 hours, the hardware appliance within a week, depending on device availability. For the cloud all you need is NetFlow or IPFIX export configured on your routers; for the appliance we need rack space and access to a mirrored interface.
What load does the system handle?
Up to 100 Gbps. Collection can be split across multiple probes and collectors, across sites and data centres — the architecture grows with the network, so you do not have to size it up front.
How quickly does it recognise an attack?
From a mirrored interface, within seconds. Records from IPFIX and NetFlow v9 exporters arrive 15 to 60 seconds after a connection ends, depending on your router configuration — the system evaluates those too and marks them as late, so you can tell what is happening now from what happened a moment ago.
Will it report attacks that are not really attacks?
Sensitivity is set with a single control across four levels — from high for quiet networks to very low for backbone and transit, where only a genuinely large attack should raise an alert. Each individual threshold can be tuned separately, and addresses that must never trigger a response go on a whitelist.
What if a detection is wrong and the system starts blocking?
For every response you set the severity at which it triggers. The whitelist also works granularly — per IP, port or protocol, and separately for the LAN and WAN side. Active blackholes sit in one table and any of them can be withdrawn with a single click.
We show you the system on your network, not on a generic demo
Forty-five minutes, online, no commitment. We go through what the platform would look like at your organisation — how many systems it would replace, how NIS2 reporting would work for you, and what it would mean for your team. Walkthroughs are one-to-one, so the answers are specific rather than generic.
Protectione Network Security walkthrough
| Length | 45 minutes |
| Format | Online video call |
| Attendees | Your team, as many as you need |
| For | ISP owners, CTOs, network and security teams |
| Price | Free, no commitment |
After you send the form we get back to you within one business day to agree a time that suits you.
Data retention
You have to retain traffic and location data anyway. With us, data retention runs on the same data as monitoring and attack detection – one system instead of two. Learn more →
Features
Deep traffic analysis, threat detection, mitigation and regulatory support over a single data set. Learn more →
NIS2
The Czech Act No. 264/2025 has applied since 1 November 2025 and covers thousands of organisations – internet providers, companies and public bodies. Here is, in plain terms, who it applies to, what it asks and how Protectione guides you through it. Learn more →
DDoS protection
The system recognises an attack, names it and can stop it before it fills your link – via RTBH or FlowSpec at your upstream peer. Learn more →
Flow monitoring
Collection from NetFlow v9, IPFIX and port mirroring, with context from the ASN database and global threat sources. All on the same data, on one screen. Learn more →
Technical solution
The same platform, the same features, the same dashboard. All that differs is where the system runs and who owns the hardware. Learn more →
Pricing and SLA
A subscription sized to your network, hardware sized to the disk array, and clearly stated prices for SLA and data export. Learn more →