Nothing answers.
SIEM, Monitoring, Backups, Identity, Vault on top of a VPN for your company, run by us on servers you own. Probed from the internet, every one of their ports stays silent: to a scanner they look switched off.
65,536 probed
0 replied
Behind the quiet, a full security stack. Run by us, on servers you own.
-
SIEM
Security events from every machine, analysed and kept on your own servers. What happens in your environment stays there; we see that something needs a look, not what.
Running -
Monitoring
Health, capacity and certificates of every machine and service, with an alert the moment something breaks, day or night.
Running -
Backups
Your Linux servers and their databases backed up every day, encrypted on the server, and restored every week to prove it. Windows servers next. building
Running -
Identity
Single sign-on for your people and your apps. Every account signs in with a second factor: a passkey, a hardware key or an authenticator app, and administrators with a key; passwords alone are not accepted.
Running -
Vault
A password vault for every person, behind the same sign-in, on your servers. Encrypted on each person's own devices: not even we can open it.
Running -
VPN
xsenv-net, a WireGuard mesh whose control plane is itself reachable only through WireGuard. A device joins with a one-time token and then belongs to whoever signed in on it.
Running
Each deployment is two nodes and a small witness. Any one of the three can go down, for a failure or for the nightly update: nothing is lost, and services come back on their own within a minute or two.
Measured against NIS2. Tested where you can see it.
5of 10
NIS2 measures whose technical side we run for you
Multi-factor sign-in, access control, encryption, backups and recovery, and vulnerability handling for everything it runs, with evidence for three more. Measure by measure, including what stays yours.
NIS2, measure by measure26seconds
Sign-in down while a machine is powered off
We cut the power of the machine holding the database and measure what people would see. Latest run on our own environment: 2 October 2026. Results are published, failures included.
See the proofWho holds what
You
- The servers, in your cloud account or in your rack.
- Everything they store, and the encrypted backups of it.
- Every user and every device.
- Every key, kept only in your environment. building
- The switch that removes our access: from your network today, from your servers too. building
Us
- Building the stack and keeping it current.
- Updates and reboots at night, one machine at a time.
- Tested restores from those backups.
- Answering every alert.
Every environment is described in code. With that code, its credentials and its backups, it can be rebuilt from nothing.
Until the parts marked building are done, we still hold copies of your environment's keys and can reach its servers without asking. Every sign-in of ours shows in your SIEM, and the dates are in your agreement.
The people who run it, and what you keep without them.
-
Marius David
Founder
More than 25 years running hosting and infrastructure: co-founder of ROSPOT, Romania's first web hosting company, and owner of the Data Node data centre in Timișoara for 15 years. Today a senior cybersecurity engineer, and the one who designs, builds and runs xsenv.
-
Cantemir Pop
Co-founding advisor
Cybersecurity engineer with more than a decade of hands-on Linux operations: nine years running systems, now securing them.
-
Cosmin L. Neagu
Co-founding advisor
25 years in tech, 20 of them as a founder, including Romania's first web hosting company and a private data centre in Timișoara. Today he builds the automation behind multi-tenant security operations.
-
Florin Cordea
Co-founding advisor
Security solutions architect. More than ten years designing IP backbones and data-centre security for telcos, clouds and large enterprises. CCNP, AWS Security Specialty.
You never depend on us staying around. Each customer holds a recovery key we never see, and with it alone can open a handover package of their environment: its code, its credentials, the way to its backups. We rehearse that handover before it is ever needed. Your servers keep running either way.
See it running.
Thirty minutes on a live environment: sign in with a passkey, join the private network, open the SIEM and the vault, and scan it from the internet yourself. Tell us how many people work with you and whether NIS2 applies to you, and we bring the numbers.
Already invited? Install xsenv-net on Linux, macOS, Windows or Android.