Cybersecurity in Tashkent and remotely

Security audits and breach protection

We audit devices, servers and applications, remove malware, update outdated software, reinstall systems and set up protection. For individuals and businesses in Tashkent and remotely.

What gets hacked most often

Breaches start with small things

Most often it is not a clever attack but old software, weak passwords and one careless click.

Outdated software

Unpatched systems and programs give attackers a ready way in.

Phishing

Fake emails, links and messages from the bank or a colleague.

Weak passwords

One password everywhere and no two-factor protection.

Unhardened servers

Extra open ports, passwords instead of keys, stale packages and no backups.

Vulnerable applications

Code flaws, leaked keys and outdated libraries in the project.

Sites on old CMS

Unpatched plugins and themes, infections and spam links.

Services

What we do

We work with Windows, macOS, Linux, Android, iOS, routers, websites, servers and applications.

For you

Computers, phones, accounts

Security check

Search for viruses, miners and spyware, a list of outdated programs, password and leak checks, two-factor protection.

Cleanup after infection

Removing malware and ad add-ons, changing passwords, revoking foreign access.

System reinstall

Data backup, clean install, drivers, disk encryption, updates and protection setup.

Hardening

Updates, firewall, password manager, backups, a safe router and Wi-Fi.

Help with hacked accounts

Telegram, email, social networks: we try to regain access and close the gaps. The result depends on the service and cannot be guaranteed.

For your business

Servers, applications, websites, office

Server recommendations

We review Linux server configuration and give a fix plan: SSH keys, firewall, extra ports, permissions, updates, backups, monitoring.

Server hardening and optimization

We close vulnerabilities, set up brute-force and attack protection, tune load and speed, and configure backups.

Application security

Code and dependency review, secret-leak search, API and login protection, rate limiting, secure configuration and deployment.

Website protection

CMS and plugin review, SSL, backups, protection from hacking and spam, cleanup of infected sites.

Corporate email

SPF, DKIM and DMARC so your email is not spoofed and does not land in spam.

Office network

Wi-Fi, routers, guest network, VPN, cameras and devices on the network.

Staff training

Phishing, passwords and safe data handling, with examples from your industry.

Incident investigation

We reconstruct the timeline of a breach from logs: when they got in, through what, what they managed to do and which data was affected. How far we can go depends on whether the logs survived, so if you suspect a breach, delete and reinstall nothing.

Incident response plan

Who does what, where to restore from and how to inform customers.

Process

How we work

We work only with your devices, servers and sites, and only with your consent.

  1. Request

    Describe what happened or what you want to protect.

  2. Contract and consent

    We fix the scope, access and confidentiality.

  3. Diagnostics

    We look for vulnerabilities and traces of compromise.

  4. Fixing

    We clean, update, configure and reinstall if needed.

  5. Report

    What we found, what we did and what is still worth fixing.

  6. Ongoing support

    Optional: regular checks and urgent help.

Methods

How we analyse

Automation gives speed, a human checks the conclusions. Sensitive data stays inside while that happens.

AI agents

They go through volumes that would take a week to read by hand: logs, configurations, package and dependency lists, change history.

Local models with no internet

When the data is sensitive, the analysis runs on a model deployed in a closed environment. Your logs and configurations never leave the perimeter and never reach external services.

Manual review

Everything automation finds is checked by an engineer. Doubtful cases are worked through by hand: the conclusion in the report is made by a person, not a model.

Deliverables

What you get

We prepare the report in two formats at once, and put together a separate presentation for management when it is needed.

PDF for management and the archive

An official document with company details and a signature: attach it to an inspection, send it to the board, keep it as proof the work was done.

HTML for developers

The same content as a page: links to affected files and lines, full requests, searchable text. Convenient to keep open while you fix things.

Presentation for management

On request we put together a short briefing for decision makers: what we found, what it threatens in money and reputation, what to fix and by when.

See a sample report

Plans

Choose a format

The price depends on the number of devices, servers and scope. We name it after a short conversation, before work starts.

Audit

One-time check and a fix plan
  • Diagnostics of devices, a server, an app or a site
  • Search for malware and signs of compromise
  • Outdated software, passwords, configuration, access rights
  • Written report with priorities and recommendations
Price: on request

Subscription

Ongoing protection and urgent help
  • Everything in the Audit plan at the start
  • Regular checks and updates
  • Server optimization and application protection
  • Monitoring and urgent help during an incident
  • Staff training
Price: individual
Principles

What we promise and what we do not

We promise

  • To work under a contract and a confidentiality agreement
  • Not to copy or store your data
  • To explain in plain words what we found and did
  • Not to oversell: only what you actually need

We do not promise

  • Absolute protection: it does not exist, we reduce risk
  • Recovery of any account: that is up to the service
  • Access to other people's devices and accounts
  • Hacking on a client's request
Status and documents

How we prove who we are

For corporate and government clients this is usually the first question, so here is the answer up front.

Cyber Park resident

NIXCLOUD LLC is registered as a resident of the IT-park of innovations in cybernetics (Cyber Park), certificate No. 0024-26 R-163 of 24 August 2026.

Contract and confidentiality

We work under a contract with a confidentiality agreement. Access is granted in writing and revoked once the work is finished.

Working with the public sector

Requirements for engaging external cybersecurity providers are changing. We confirm the current procedure and our status at the start of a project, before signing.

Questions

Frequently asked questions

Can you work remotely?

Yes, most checks and setups are done remotely over a secure connection with your permission. Reinstalling a system is easier on site.

Are my files and passwords safe?

We do not copy or store your data. We work under a contract and a confidentiality agreement. Access lasts only for the duration of the work.

What do you check on a server?

SSH access, firewall and open ports, updates, file permissions, running services, backups, load and logs. We then give a prioritized list of fixes.

What if I was just hacked?

Do not pay extortionists and do not delete files. Change your email password from a clean device, enable two-factor protection and contact us right away.

Do you work with companies?

Yes. We protect servers, applications, websites, email and the office network, train staff and write an incident response plan.

You use AI – will my data leak?

For sensitive data we work on a model deployed in a closed environment with no internet access: logs and configurations never reach external services. Where the data is not sensitive, we use ordinary AI agents. What is analysed and how is fixed in the contract before the work starts.

Request

Tell us what happened

Fill in the form, copy the text and send it to us in a messenger or by email.

Contact

Get in touch

Telegram is fastest: you can attach screenshots and a description right away. Calls are taken during business hours.

Takes your request and passes it to us, we reply faster @NixCloudAIBot Message on Telegram
Cybersecurity specialist, business hours +998 90 907 43 58

If a breach is happening right now, write "urgent" and describe briefly what is going on.