← Back to the main pageTechnical solution

Two routes to the same system

The same platform, the same features, the same dashboard. All that differs is where the system runs and who owns the hardware.

How it works

How the data flows

Your routers send traffic statistics to the system. It evaluates them, and when it finds an attack it sends back an instruction to block it. You watch the dashboard in your browser.

Your network routers, optionally a probe on mirroring traffic statistics — NetFlow, IPFIX, sFlow over an encrypted tunnel Data centre in Czechia flow ingest and normalisation detection, reputation, ASN and RPKI archive and data retention dashboard over HTTPS Web interface you, in a browser, from anywhere attack blocking — RTBH / FlowSpec
Traffic statistics travel one way; a blocking instruction comes back. The dashboard opens in your browser, any time, from anywhere.

Where the system runs is your choice. In the cloud we run it; with the hardware option the same software runs on a server in your own network. The diagram stays the same — only the middle box moves.

Two options

Which to choose

Functionally they are equals. They differ in where the data sits, who owns the hardware and how fast the system spots an attack.

CloudHardware in your network
Where the system runsour data centre in Czechiayour rack
Where the data iswith us, encryptedwith you
Up-front investmentnonepurchase or leasing
How fast an attack is spotted15–60 sa few seconds
Suitable for data retention~✓
Deploymentwithin 48 hourswithin a week

Faster detection on your own iron is no magic: a probe on a mirror port sees the packets immediately, while an export from the router only arrives once the connection ends. And mirroring cannot be sent to the cloud — it is a physical copy of the traffic on a port.

Cloud

We run it for you

The fastest route to your first data. No hardware to buy, no changes to your traffic path.

Traffic and location data under Section 97 of the Czech Electronic Communications Act is better kept at your site, on your own server. The operator carries the responsibility for it. Security analytics in the cloud is not limited by this.

Hardware

The server is yours

It sits in your rack, no data leaves it, and it is your property from day one.

Server price

What it costs

Server hardware prices have risen sharply and continue to fluctuate — most of all for disks and memory. We therefore do not publish a fixed price list.

Worked example

from EUR 6,000

Typically EUR 6,000 to EUR 8,800 per server. The difference comes mainly from the size of the disk array — how much traffic the network generates and how long the data has to be kept.

The range is indicative, current as of today and not an offer. We will calculate the actual price from the size of your network and the retention period you need.

Minimum requirements

What the server has to handle

The bands match network size as used in the price list.

up to 1,000 subscribers1,001–5,0005,001–20,00020,000+
Trafficup to 5 Gbpsup to 20 Gbpsup to 50 Gbpsup to 100 Gbps
Processor8 cores16 cores24–32 cores2× 32 cores
ECC memory32 GB64 GB128 GB256–512 GB
Disks2× 960 GB NVMe + 2× 4 TB2× 1.92 TB NVMe + 4× 8 TB4× 3.84 TB NVMe + 8× 16 TB8× 7.68 TB NVMe + separate archive
Network for mirroring1× 10 GbE2× 25 GbE2× 40/100 GbE2× 100 GbE

An Intel X710, E810 or ConnectX‑5/6 network card. Cheap cards on a mirror port above 1 Gbps drop packets silently, with nothing in the log. We will design the exact configuration around your network.

Next step

Not sure which option fits you?

Tell us how many subscribers you have, how much traffic they generate and how long you need to retain data. We will come back with a specific proposal.

Book a presentation See pricing