Solutions

Indeed Access Manager (Indeed AM) is a Russian platform for centralized access management to corporate IT resources. The solution supports multi-factor authentication (MFA), including push notifications, OTP, RFID, and biometrics, as well as single sign-on (SSO) technologies. Indeed AM integrates with Active Directory, VPN, SIEM systems, and complies with FSTEC and PCI DSS requirements. The product is installed on-premise, ensuring full data control and secure remote access.

Solar SafeInspect is an innovative monitoring and diagnostics system for solar power plants, designed to control the performance of photovoltaic modules, detect malfunctions, and optimize energy efficiency. Using built-in sensors and cloud analytics, the system identifies shading, soiling, panel damage, and other anomalies, helping to minimize downtime and increase energy output. Compatible with most solar installations, it provides detailed reports via a mobile app or web interface.

The advanced Russian platform 1IDM is designed for building modern systems for managing user accounts and access rights (identity management system) of any scale and complexity for both government agencies and commercial organizations.

PT NGFW by Positive Technologies is Russia’s first next-generation firewall (NGFW) designed to secure high-load networks against modern cyber threats. It delivers exceptional performance (up to 300 Gbps in L7 mode) with deep traffic analysis, including application control (4500+ apps, including Russian services), IPS, antivirus scanning, and URL filtering. PT NGFW supports TLS inspection, failover clustering, and VPN, while its hardware platforms (from compact SMB models to high-end data center solutions) are manufactured domestically. The product leverages PT Expert Security Center’s expertise to counter APT attacks and data breaches. It is certified by FSTEC and complies with international standards like RFC 9411

Kaspersky DDoS Protection is a comprehensive solution designed to safeguard online resources against distributed denial-of-service (DDoS) attacks. It offers 24/7 traffic monitoring, real-time anomaly detection, and redirection of malicious traffic to Kaspersky’s global network of scrubbing centers for filtration. The solution integrates local sensors (deployed on servers or virtual machines) with Kaspersky’s cloud infrastructure to mitigate volumetric, application-layer, and hybrid attacks. Key features include threat intelligence from Kaspersky experts, automated response, post-attack reporting, and SLA-backed uptime guarantees. Ideal for businesses of all sizes, it reduces both financial and reputational risks

Solar NGFW is a next-generation firewall developed by RT-Solar, designed to provide comprehensive protection for corporate networks against modern cyber threats. This Russian-made solution combines traditional firewall capabilities with advanced features, including application control, intrusion prevention system (IPS), antivirus protection, web content filtering, and encrypted traffic analysis (TLS inspection). Solar NGFW delivers high performance and scalability, supporting operation in distributed networks and cloud environments. The product is certified by FSTEC of Russia and complies with regulatory requirements, making it an ideal choice for government agencies and commercial enterprises that require robust protection for critical infrastructure.

Is a system-forming Russian IT company, the main field of activity is the development of information security tools.

MaxPatrol SIEM by Positive Technologies is a flagship Russian SIEM (Security Information and Event Management) solution designed for real-time monitoring, analysis, and incident response. It provides full visibility into IT infrastructure, detects advanced threats (including APTs), and integrates seamlessly with other PT products (e.g., PT NAD, MaxPatrol VM) for layered defense. Key features include log collection and normalization, customizable correlation rules, retrospective threat analysis, and the Behavioral Anomaly Detection (BAD) module for AI-driven anomaly detection. With a capacity of 540K events per second, it complies with Russian regulations (FSTEC, 152-FZ) and receives monthly expert updates via PT UCS. Ideal for SOC deployment, critical infrastructure protection (CII, GIS), and replacing foreign SIEMs like Splunk or ArcSight

Kaspersky Unified Monitoring and Analysis Platform (KUMA) is a centralized cybersecurity monitoring and analysis platform designed for comprehensive threat management in enterprise environments. The solution aggregates data from various Kaspersky products and third-party systems, providing a unified dashboard for incident detection, threat investigation, and decision-making. KUMA leverages machine learning and advanced analytics to identify sophisticated attacks, including targeted and stealthy threats. The platform supports integration with existing IT infrastructure, automates response processes, and delivers detailed reports for regulatory compliance. KUMA is ideal for building SOC environments and enhancing security teams' efficiency by reducing threat detection and mitigation time.

Micro Focus ArcSight ESM (Enterprise Security Manager) is a robust SIEM (Security Information and Event Management) platform designed for real-time threat detection, analysis, and response. The solution provides centralized collection, normalization, and correlation of security data from diverse sources, including network devices, applications, and systems. ArcSight ESM employs advanced correlation algorithms and machine learning to identify sophisticated attacks, such as APTs and insider threats. The platform supports automated incident response, integrates with other security systems, and delivers detailed compliance reports (PCI DSS, GDPR, HIPAA, etc.). ArcSight ESM is ideal for large enterprises and organizations requiring a scalable and reliable security monitoring solution.

Trellix Enterprise Security Manager (formerly McAfee ESM) is a next-generation scalable SIEM platform delivering advanced threat analytics and centralized security monitoring for hybrid IT environments. The solution combines machine learning, behavioral analysis, and threat intelligence to detect sophisticated multi-stage attacks including APTs, ransomware, and insider threats. The platform automates data collection and correlation from 500+ sources, integrates with Trellix ecosystem products (including MVISION and Endpoint Security), and provides out-of-the-box reporting templates for GDPR, NIST, PCI DSS compliance. Key advantages include cloud-native architecture with SaaS deployment options, built-in SOAR capabilities, and adaptive anomaly detection algorithms, making it an ideal choice for enterprises and SOC teams requiring advanced threat detection and response.

Positive Technologies is a leader in the field of effective cybersecurity. The company is a leading developer of products, solutions and services that enable the detection and prevention of cyber attacks before they cause unacceptable damage to businesses and entire sectors of the economy. Positive Technologies is used by about 4,000 organizations worldwide.

Cyber attack simulation platform Continuous objective assessment of the level of security and increasing the effectiveness of the protection system

Cicada8 is a Russian platform for automated penetration testing and vulnerability assessment of corporate infrastructure. The solution emulates real attacker techniques to comprehensively examine network services, web applications, and APIs for vulnerabilities, including OWASP Top 10, zero-day exploits, and configuration errors. Combining automated scanning with manual testing elements, the platform integrates with SIEM systems and DevOps tools while generating detailed remediation reports. Cicada8 is particularly valuable for financial institutions and critical infrastructure operators due to its compliance with Russian Central Bank and FSTEC security standards.

Rapid7 InsightVM is a cloud-based vulnerability management platform that provides continuous monitoring and risk assessment for enterprise networks. The solution automatically identifies vulnerabilities across IT infrastructure, including operating systems, applications, and network devices, leveraging an up-to-date vulnerability database and exploit analysis technologies. InsightVM offers risk prioritization based on severity and potential business impact, integrates with SIEM systems and patch automation tools, and supports compliance with standards like PCI DSS, HIPAA, and GDPR through detailed reporting and remediation guidance. Ideal for SOC teams and security professionals, InsightVM helps reduce attack surfaces and mitigate cyber risks effectively.

PT AF (Application Firewall) by Positive Technologies is a next-generation Russian WAF (Web Application Firewall) designed to protect web applications, APIs, and microservices against modern cyber threats. The solution combines signature analysis with behavioral technologies and machine learning to effectively combat SQL injections, XSS, DDoS, brute-force attacks, and sophisticated targeted threats. PT AF offers both passive monitoring and active blocking modes, automatically adapts to application changes, and ensures compliance with PCI DSS 4.0, 152-FZ, and GDPR. Key features include high-performance support (up to 1 million RPS), built-in API attack protection, integration with PT SIEM and PT NAC, and FSTEC Russia certification. The platform is particularly valuable for financial institutions and government agencies due to its air-gapped network compatibility and support for Russian software.

Solar WebProxy by RT-Solar is a high-performance secure web proxy solution for corporate traffic control and web filtering. It protects against phishing, malicious websites, and inappropriate content while offering URL categorization (58+ categories) and policy-based access control. The solution delivers exceptional performance (supporting up to 500K concurrent connections), includes traffic caching for speed optimization, and integrates with authentication systems (Active Directory, LDAP). Certified by FSTEC Russia and compatible with domestic OS platforms, Solar WebProxy is ideal for government agencies and businesses requiring secure and managed internet access with regulatory compliance.

Webmonitorx is a Russian cybersecurity vendor with over a decade of expertise in protecting web applications, microservices, and APIs. Its platform features ProWAF (Web Application Firewall) and ProAPI solutions, certified by FSTEC Russia and listed in the national software registry. The solution delivers 99.9% attack detection accuracy with low false positives, employing signature-less analysis and out-of-the-box traffic inspection to counter OWASP Top-10 threats and zero-day exploits. Key strengths include virtual patching, compatibility with Russian OS (Astra Linux, RedOS) and web servers (ANGIE, nginx), and 24/7 support. Deployed in finance, government, and e-commerce sectors, it secures high-load systems for clients like SberAuto and Moscow’s IT Department

StormWall WAF is a next-generation cloud web application firewall that provides comprehensive protection for websites, web applications, and APIs against a wide range of cyber threats. The solution effectively blocks SQL injections, XSS attacks, DDoS, brute force, and other types of attacks, including automated bot threats. StormWall WAF utilizes intelligent traffic behavior analysis and machine learning to detect sophisticated attacks with minimal false positives. The platform offers easy integration without code changes, 24/7 monitoring, and zero-day vulnerability protection. Key features include high performance (supporting millions of requests per second), built-in API attack protection, and CDN acceleration for global traffic. StormWall WAF is suitable for businesses of all sizes and complies with international security standards.

PT SandBox by Positive Technologies is an advanced sandboxing solution for detecting sophisticated threats, including APTs and zero-day malware. The solution analyzes suspicious files and URLs in an isolated environment, emulating various OS and applications to uncover hidden threats. It employs multi-layered analysis (static, dynamic, behavioral) and integrates with PT's global threat intelligence for maximum efficacy. PT SandBox automatically generates detailed reports with IoCs and response recommendations, while seamlessly integrating with SIEM systems and other PT products. Certified by FSTEC Russia and compatible with domestic OS platforms, it's particularly valuable for government and financial sectors facing advanced cyber threats.

Xello Deception is Russia's first Distributed Deception Platform (DDP) designed to detect and prevent advanced persistent threats (APTs) using deception technology. The solution creates a distributed layer of decoys (fake credentials, servers, files) and traps (emulated devices/services) across corporate networks, indistinguishable from real assets. When attackers interact with them, the platform instantly detects intrusions, collects forensic evidence, and triggers alerts. Leveraging patented Dexem AI technology, Xello Deception adaptively generates hyper-realistic baits, analyzes infrastructure, and integrates with SIEM, NAC, and other security tools. It supports Russian OS (Astra Linux, RED OS), requires no host agents, and holds FSTEC certification. Key use cases include uncovering insider threats, MITM attacks, and Active Directory compromises, with deployment possible within days

Kaspersky EDR (Endpoint Detection and Response) is an advanced threat detection and response solution for endpoints that combines behavioral analysis, machine learning, and expert analytics. The platform provides continuous monitoring of device activity, detects sophisticated attacks (including APTs and ransomware), and offers tools for rapid response. Kaspersky EDR automatically collects and analyzes telemetry, reconstructs attack chains, and provides remediation recommendations. The solution integrates with SIEM systems and other Kaspersky products while complying with international cybersecurity standards. Kaspersky EDR is particularly valuable for enterprise environments requiring protection against modern cyber threats with minimal response time.

F6 Threat Intelligence is a cyber threat intelligence platform designed to proactively identify and prevent information security threats. The solution combines strategic, operational, and tactical intelligence data, delivering unique insights into attackers' methods, tools, and infrastructure. It employs graph analysis to visualize connections between threat actors and their resources, enabling rapid identification of risks specific to your threat landscape. F6 Threat Intelligence integrates with SIEM, SOAR, and EDR systems via APIs supporting TAXII/STIX standards, automates vulnerability detection, and reduces response times. The platform also provides customized threat reports for executive teams and helps optimize security costs by prioritizing critical risks and filtering false positives

Garda Threat Intelligence is a Russian cyber threat intelligence service delivering up-to-date threat data feeds to enhance security systems. The solution processes over 60,000 new IoCs daily across 10 threat categories, including botnets, phishing, DDoS, brute force, and mining. Data is provided in 5 formats (JSON, TXT, CSV, SIG, STIX) and integrates with SIEM, NGFW, IPS/IDS, and other security tools. Leveraging proprietary data sources and analytics from Garda’s expertise center, it ensures high accuracy and relevance for the Russian market. The service features automated feed delivery via an on-premise container, reduces false positives, and complies with FSTEC standards. Key use cases include blocking malicious IPs, real-time threat monitoring, and protecting financial institutions from targeted attacks like phishing

Kaspersky Threat Data Feeds are continuously updated threat intelligence streams delivering structured data on malicious activity and infrastructure. The solution aggregates information from multiple reliable sources, including Kaspersky Security Network, and enriches it with actionable context to detect threats like botnets, phishing, open-source software vulnerabilities, and targeted attacks. Feeds are available in various formats (JSON, CSV, STIX, OpenIoC) and seamlessly integrate with SIEM, NGFW, IPS/IDS, and other security systems. Kaspersky Threat Data Feeds help reduce false positives, automate incident response, and ensure compliance with PCI DSS, GDPR, and other standards. Ideal for SOC teams, industrial organizations, and developers adopting DevSecOps practices

Kaspersky Cyber Threat Intelligence Services is a comprehensive threat intelligence platform delivering actionable insights to combat modern cyber threats. It aggregates data from 150M+ Kaspersky Security Network sensors, expert research, and machine learning to uncover APT groups, malware campaigns, and vulnerabilities. The service provides tailored threat reports, up-to-date IoCs in STIX/TAXII formats, and expert-led incident response guidance. Integrating with SIEM/SOAR systems, it enables attack forecasting based on trends and reduces security operational costs through automation. Used by financial institutions, telecoms, and industrial enterprises to defend against targeted attacks and align with NIST, MITRE ATT&CK frameworks

Positive Technologies Threat Intelligence Feeds deliver real-time threat data on IoCs and attacker TTPs to automate cyber defense. Leveraging PT's expertise in APT analysis and zero-day vulnerabilities, the feeds aggregate data from proprietary research, honeypot networks, and OSINT. They provide malicious IPs, domains, file hashes, and attack patterns in STIX/TAXII, JSON, and CSV formats. Designed for integration with SIEM, NGFW, and SOAR systems, these feeds enable early threat blocking and reduced response times. A key differentiator is their focus on threats targeting Russian organizations, including specialized feeds for finance and ICS sectors. The service meets FSTEC requirements and updates continuously

Organization of information support for projects with the participation of external contractors

R7 is a Russian developer of office software. The key product of the company is the office package "P7-Office". "P7-Office" is presented in the desktop version, the server version and as a cloud office.

MoyOfis (MyOffice) is a Russian office software ecosystem for document collaboration, featuring text, spreadsheet, and presentation editors, corporate email (Mailion), the Squadus messenger, cloud storage, and data protection tools. The solution supports all major platforms (Windows, Linux, macOS, Android, iOS) and is compatible with domestic OS like Elbrus and Aurora. Certified by FSTEC, FSB, and the Russian Ministry of Defense, it meets requirements for handling classified and state-sensitive data. Targeting government agencies, enterprises, and educational institutions, MoyOfis offers both on-premise (Standard, Professional) and cloud-based (Private Cloud, Secure Cloud) versions

An information security complex for monitoring remote workplaces and actively responding to non-compliance with security profiles. 

SOTI is a leading enterprise mobility and IoT management platform delivering end-to-end solutions for controlling, securing, and optimizing mobile devices in business environments. Its flagship SOTI ONE Platform integrates products like SOTI MobiControl (EMM for device lifecycle management), SOTI XSight (diagnostic intelligence), SOTI Snap (mobile app development), and SOTI Connect (IoT printer management). The platform supports all major OS (Android, iOS, Windows, Linux) and device types (smartphones, tablets, rugged devices), ensuring data security, operational efficiency, and reduced downtime. Key features include SOTI XTreme Technology for 10x faster data transfer in remote locations, centralized security policy management, and IoT ecosystem integration. SOTI solutions are widely adopted in logistics, retail, healthcare, and other industries to streamline critical mobile operations

Cyberprotect is a Russian software developer for data protection, backup and recovery of virtual, physical and cloud environments.

SpaceBit is a Russian software developer focused on cybersecurity solutions, offering tools for IT infrastructure protection and automated security management. Its product portfolio includes systems for cryptographic protection lifecycle management, security configuration management, and incident monitoring/response. Designed for businesses and government agencies, SpaceBit’s solutions are listed in Russia’s Domestic Software Registry and certified by FSTEC for handling sensitive data. The products support compatibility with Russian OS like Elbrus and Aurora, addressing the security needs of critical infrastructure

Tufin is a leading network security policy management platform that automates and orchestrates changes across hybrid and multi-vendor networks. Its solutions, like the Tufin Orchestration Suite, feature SecureTrack, SecureChange, and SecureApp modules, providing visibility, control, and compliance. The platform automates policy changes, optimizes firewall rules, manages risks, and simplifies audits while supporting standards such as PCI-DSS and HIPAA. Tufin also integrates with cloud environments and DevOps pipelines, accelerating application deployment and reducing cyber risks 

Efros Config Inspector is a Russian configuration audit tool developed by Gazpromneft-IT to automate IT system hardening and vulnerability detection. The solution scans OS (Windows/Linux), databases, web servers, and network devices for compliance with regulatory standards (FSTEC, Central Bank of Russia, PCI DSS) and internal security policies. It identifies misconfigurations, excessive privileges, and deviations from baseline images, generating detailed remediation reports. Key differentiators include support for Russian OS (Astra Linux, ALT, RED OS) and SIEM integration for rapid incident response. Widely adopted by financial institutions, energy companies, and government agencies for critical infrastructure audits and compliance preparation

SecHard is a cyber hygiene platform created by Turkish cybersecurity veterans to automate vulnerability analysis and remediation in IT infrastructure. The solution aligns with NIST SP 800-207 (Zero Trust Architecture), Gartner Adaptive Security Architecture, and the Turkish Presidential Office’s cyber hygiene memorandum. Its flagship product, SecHard Cyber Hygiene Holistic, conducts automated security scans and applies fixes without expert intervention, enhancing protection levels and delivering unmatched ROI. With offices in Turkey (Istanbul, Ankara), UK (London), South Africa (Johannesburg), and Singapore, the company provides global service coverage. The platform is ideal for organizations seeking compliance with modern security standards while minimizing operational overhead

Kaspersky Container Security is a specialized solution for securing containerized environments across their entire lifecycle, from development to operation. The product safeguards container images, orchestrators (Kubernetes), and workloads by detecting vulnerabilities, malware, and misconfigurations. It integrates with CI/CD pipelines (Jenkins, TeamCity), automates compliance checks (PCI DSS, FSTEC standards), and enables DevSecOps practices. Features include real-time monitoring, container network traffic control, and behavioral analysis using eBPF technology. Version 2.0 (2024) introduced auto-profiling, HashiCorp Vault integration, and enhanced forensics for incident investigation. Certified as Russian software, it supports Astra Linux and RED OS, targeting financial, telecom, and government sectors

Positive Technologies is a leader in the field of effective cybersecurity. The company is a leading developer of products, solutions and services that enable the detection and prevention of cyber attacks before they cause unacceptable damage to businesses and entire sectors of the economy. Positive Technologies is used by about 4,000 organizations worldwide.

Luntry is Comprehensive Protection throughout the entire lifecycle of containerized applications and orchestration tools based on Kubernetes

A Russian company that develops impeccable servers and effective solutions for IT infrastructure.

A comprehensive software solution for securely managing a virtualization environment

Numa Technologies Company is a Russian developer of specialized software and information security tools. The company's activities are focused on carrying out developments in key areas of information technology significant for creating secure information systems: endpoint protection (Numa BIOS, Numa Arce, Numa uGate), network protection (Numa Edge) and secure virtualization (Numa vServer).

A certified OS with built-in information security tools (SDI) for stable and secure operation of IT infrastructures of any scale and processing of information of varying degrees of confidentiality. Versions are available for server, desktop, mobile and embedded application scenarios

Microsoft 365 is a cloud-based subscription that includes popular Office apps like Word, Excel, PowerPoint, and Outlook, with regular updates and extra features. It provides 1 TB of OneDrive cloud storage, multi-device access, and real-time collaboration. Plans are available for personal use or families (up to 6 users).

Red OS is a Russian Linux-based operating system developed by Red Soft for workstations and servers. It complies with international POSIX and LSB 4.1 standards, as well as the requirements of the FSTEC of Russia, making it suitable for use in government and corporate IT systems with high security demands. The system supports Russian cryptographic standards, including electronic signatures, and is compatible with domestic software. Red OS comes in two editions: "Standard" (for general use) and "Certified" (for handling confidential data). It features desktop environments like MATE, GNOME, and KDE Plasma, office suites (LibreOffice), browsers with GOST cryptography support, and tools for virtualization and containerization. The OS is widely adopted in the public sector and by major corporations like Rostelecom and Rosatom

Postgres Pro is a high-performance database management platform based on PostgreSQL, developed by the Russian company Postgres Professional. It offers advanced features for handling large volumes of data, including optimized storage mechanisms, parallel query processing, enhanced security, and support for Russian cryptographic standards. The solution is available in two editions: Standard (for general use) and Enterprise (with additional features for corporate clients). Postgres Pro is compatible with most operating systems, including Linux, Windows, and macOS, and is actively used in the public sector, banking, and large-scale commercial projects.

Microsoft SQL Server is a powerful relational database management system (RDBMS) developed by Microsoft. It provides a robust platform for storing, processing, and analyzing data with support for transactions, business intelligence, and machine learning. SQL Server is available in multiple editions, including Enterprise, Standard, and Express, to meet the needs of businesses of different scales. The system integrates with Microsoft Azure cloud services, enabling hybrid solutions, and supports advanced security features, including data encryption and access control. SQL Server is compatible with both Windows and Linux, making it a versatile solution for enterprise and web applications.

Oracle Database is a premier object-relational database management system (RDBMS) developed by Oracle Corporation. It delivers high performance, scalability, and security for mission-critical enterprise applications. The platform supports transaction processing, analytics, machine learning, and big data workloads, including features like JSON support, blockchain tables, and embedded JavaScript. Available in multiple editions, such as Enterprise, Standard, and the free Express Edition (XE), Oracle Database also offers cloud-based solutions via Oracle Cloud. Renowned for its reliability and self-management capabilities, it is widely adopted in finance, telecommunications, and government sectors

Positive Education is an educational platform by Positive Technologies providing online courses and training in cybersecurity. The program covers a wide range of topics, including ethical hacking, vulnerability analysis, data protection, and cyber incident investigation. Training is conducted by industry experts using hands-on exercises and real-world case studies, enabling students to acquire up-to-date skills for careers in information security. The platform offers both free and paid courses, with certificates recognized in the professional community.

Comprehensive development of cybersecurity skills for information security professionals. Practical application of knowledge and processes at the cyber range of Solar Group.

Kaspersky Education is an educational platform by Kaspersky Lab designed for cybersecurity training. It offers courses, workshops, and teaching materials for students, educators, and IT professionals, helping them develop skills to counter cyber threats. The platform features interactive modules, quizzes, and real-world case studies, enabling users to learn the fundamentals and advanced aspects of information security in a practical format.

PHISHMAN – A Solution for Developing Cyber Culture in Companies:It analyzes employees' digital behavior, enhances their cybersecurity skills, and strengthens trust in the security team.