Detected malware is blocked or moved to quarantine, and an infected device can be taken off the network.
EDR detects and blocks attacks on each device and records what happened. With optional MDR, a team of experts also reviews the alerts around the clock and responds.
The protection status of every device, in the Antivirus app at my.ingos.com. Exclusions and releases from quarantine are currently handled by INGOS, and more functions will be added to INGOS.OS step by step.
INGOS Antivirus with EDR is antivirus software for Windows, macOS and Linux computers and servers, and for mobile devices. It detects attacks by how they behave and blocks suspicious encryption. EDR stands for endpoint detection and response, meaning threats are detected and handled on the device itself.
Yes. EDR supports you in meeting what both frameworks require for detecting and handling security incidents. If you wish, the TÜV-certified information security officers at INGOS can help you determine whether NIS 2 applies to your company and what else is needed.
2. Active Directory Manager
The Active Directory Manager finds accounts nobody has used for a long time, for example after an employee has left. They can be disabled or deleted, several at once if needed, so forgotten access is spotted and can be revoked.
From a template for the department or role. Each new account starts with the groups and permissions that belong to it, and several accounts can be created at once.
The INGOS Active Directory Manager maintains the users, groups and group policies of your Active Directory from one place. Templates set up new accounts, inactive accounts are identified, and reports list accounts, computers and permissions.
Reports on accounts, computers and permissions that show who can access what. They support you in meeting ISO 27001, TISAX and NIS 2 requirements but do not replace a certification. If you wish, the TÜV-certified information security officers at INGOS will work with you on those requirements.
No. It works with your Active Directory whether it runs on your virtual machines in the INGOS Private Cloud or on servers in your company.
Not yet. A dedicated app is in preparation, and you can already register your interest in the INGOS.OS App Store. Phone, Backup, Support, Antivirus and Virtual Servers run there today.
3. ASSET MANAGEMENT
Yes, on managed devices. Asset Management reports when software or hardware is added to or removed from them. Services used only in a browser and not installed on any managed device do not appear in the inventory.
INGOS Asset Management uses regular scans to record which hardware and software is in use on your managed devices and reports when something is added or removed. That gives you a reliable basis for licensing and security decisions.
From scans of your managed devices, on a schedule or on demand.
Yes. It covers your managed devices, whether they are your virtual machines in the INGOS Private Cloud or servers and workstations in your company.
Not yet. A dedicated app is in preparation and already listed in the INGOS.OS App Store, where you can register your interest. Until then, inventory details are available through your contact at INGOS or a support request in INGOS.OS.
Yes. An overview of the hardware and software on your managed devices supports you in meeting ISO 27001 and NIS 2 requirements. It does not replace a certification.
4. BACKUP
By default in a second data center in Germany, separate from your servers. INGOS signs a data processing agreement with every customer, transfers no data to third countries and does not use it commercially. If you wish, a further copy can be kept at an additional location in line with the 3-2-1 rule.
By default your backups are kept separate from your servers, and backup versions cannot be deleted in the backup software on your devices. How far back you can go in an emergency depends on the retention you set in INGOS.OS.
Yes. In INGOS.OS you search all backup versions, compare two of them and restore files yourself, as long as one of your backed-up devices is online. INGOS restores a complete server or computer once you submit a support request.
INGOS Backup backs up servers, workstations, NAS systems and Microsoft 365. In the Backup app in INGOS.OS at my.ingos.com, you see what is being backed up right now, where a job is stuck and what to do next.
The schedule and retention of your backups. You can also start an extra backup outside the regular schedule, for example before a major update.
With a report for any period you choose, which you can print or save as a PDF in INGOS.OS. It shows which devices were backed up successfully and when, as evidence for management and auditors.
5. LOG ANALYZER
They can show when and how an attacker operated, provided the affected systems were connected. That makes them the basis for investigating the incident.
Spread across many servers, logs are hard to read in context. Brought together in one place, they show what happened across several systems.
The INGOS Log Analyzer brings the logs from your servers and applications together in one place and retains them. Unusual activity stands out sooner.
Yes. Centrally collected logs support you in providing evidence for ISO 27001 and NIS 2. They do not replace a certification.
Servers and applications, whether they run in the INGOS Private Cloud or in your company. Which sources are connected in your case is decided together with INGOS during setup.
6. LOAD BALANCER
The load balancer redirects requests to your application's remaining servers, provided the application runs on at least two of them.
To distribute requests, yes. In front of a single server, the load balancer can still take over encryption and lighten that server's load.
The INGOS Load Balancer spreads requests for an application across several servers. It also takes over encryption for your servers, which lightens their load.
No. It distributes requests and takes over encryption, but you still need a firewall alongside it. For web applications, the Web Application Firewall from the Security Add-ons adds a further layer of protection.
Yes. It can be combined with the INGOS Private Cloud or with the servers in your company. A dedicated app in INGOS.OS is in preparation, and you can already register your interest in the App Store.
INGOS configures it for your applications and keeps it up to date. It is the same technology INGOS uses for its own services.
7. MANAGED FIREWALL
A firewall that is run as a service and maintained continuously. INGOS Managed Firewall inspects the traffic between your network and the internet, filters malicious websites and stops the attacks it detects.
A conventional firewall is configured once and then runs on fixed rules. INGOS Managed Firewall is monitored continuously, and its rules keep pace with the current threat landscape.
Your company does. It defines what the network allows, and the firewall enforces those rules, together with protection rules that keep pace with the current threat landscape. You initiate changes with a support request in INGOS.OS.
Yes, if you want it, and to your specifications. The firewall then inspects encrypted connections as well. Your company decides which connections stay exempt, such as online banking.
No. Managed Firewall protects the boundary between your network and the internet, whether your servers run in the INGOS Private Cloud or at your company.
8. MDM
Central management and protection for company smartphones, tablets and other mobile devices. With INGOS MDM, approved apps are defined centrally and lost devices can be locked. Company data stays under your control, even on the move.
The device can be locked centrally. You initiate the lock with a support request in INGOS.OS.
Yes. Your company decides which apps are allowed, and INGOS MDM approves or blocks them centrally across your company devices.
Yes. INGOS MDM keeps company data under your control, even on mobile devices. INGOS supports companies with GDPR requirements, with data protection auditors on the team.
9. MFA
A sign-in that requires more than one proof of identity. With INGOS MFA, that means a physical security key plus a personal PIN. A stolen password alone no longer opens your PCs or company systems.
Because a code from an app can be captured on a fake sign-in page. A security key, by contrast, has to be physically present and only works together with the PIN.
No. INGOS MFA secures sign-in to your PCs and company systems. INGOS.OS at my.ingos.com has its own procedure: a passwordless email link, optionally with a passkey or security key.
No one can use it on its own, because the key does not complete a sign-in without the PIN. For a lost key, you submit a support request in INGOS.OS.
Yes. INGOS supports companies with NIS 2 requirements, with TÜV-certified information security officers on the team. INGOS MFA contributes with a security key and PIN.
10. MONITORING
IT monitoring is the continuous oversight of a company's IT. INGOS Monitoring is one of the Security Add-ons and keeps watch over your servers, workstations and applications.
Yes. INGOS Monitoring also keeps watch over servers at your company, not just the INGOS Private Cloud. The systems being monitored remain your property.
Through the data processing agreement in place with every customer. INGOS does not analyze data from your monitored systems for commercial purposes, and a data protection officer is appointed.
Monitoring watches whether servers, workstations and applications are running. Patch management keeps operating systems and software up to date. Both are part of the Security Add-ons.
11. PASSWORD MANAGER
A central, encrypted vault for a company's passwords and credentials. INGOS Password Manager pairs it with roles, sharing and a log of every access.
You do. They are your company's credentials, and they stay that way. INGOS provides the platform.
Only the people they are shared with. Passwords are shared deliberately with specific people or roles, and every access is logged.
They stay in your company's vault. The person's access is revoked, and any passwords they used can be rotated selectively.
Through a data processing agreement that INGOS concludes with every customer. A data protection officer is appointed, and customer data is not transferred to third countries and is not analyzed for commercial purposes.
Yes, integration into INGOS.OS is in preparation. You can already register your interest in the app in the INGOS.OS App Store.
12. PATCH MANAGEMENT
Patch management is the planned rollout of updates to operating systems and software, so that known vulnerabilities are closed. INGOS Patch Management keeps your servers and workstations current, on schedule and within fixed maintenance windows.
In maintenance windows set to your requirements. Servers and workstations can each have their own windows. You initiate a change with a support request in INGOS.OS.
Yes. Servers at your company also receive their updates in a maintenance window set to your requirements.
Yes. INGOS supports companies with NIS 2 requirements, with TÜV-certified information security officers on the team. Patch Management contributes by keeping your servers and workstations current in maintenance windows set to your requirements.
Not yet. A dedicated view with update status and history for each device is in preparation in INGOS.OS. It will join the Backup, Antivirus and Virtual Servers apps, which already provide visibility today.
13. WEB APPLICATION FIREWALL
A firewall built specifically for web applications. INGOS Web Application Firewall checks every request to your website or web application and blocks common attacks such as cross-site scripting and SQL injection before they reach it.
Because it protects something different. A network firewall guards your network as a whole. A WAF inspects the content of every request to your web application, including encrypted HTTPS traffic.
Any web application where customers, partners or employees enter data, such as an online shop, a careers portal or a customer portal. That is exactly where attacks like SQL injection and cross-site scripting take aim.
Yes. INGOS runs the WAF and keeps its protection rules current on a regular basis. Your company decides which web applications it protects.
Yes. The WAF checks every request to your web application, whether it runs in the INGOS Private Cloud or on a server at your company.
