The product and service portfolio of @-yet GmbH is based on a holistic approach to digital sovereignty. A cornerstone of the company is its manufacturer- and product-independence: @-yet does not sell any hardware or software itself, which guarantees neutral and needs-based consulting.

Its offerings are divided into three main strategic pillars:

• 1. Cybersecurity & Secure Infrastructure
  The company supports clients from the initial baseline analysis (maturity assessments) through to customized security concepts.
  
  Infrastructure and Network Protection: Design of finely segmented networks, protection of Active Directory, and hardening of systems against ransomware attacks.
  
  Application Security: Testing mobile and web-based applications for potential security vulnerabilities.
  
  Artificial Intelligence (AI): Consulting, quick checks, and workshops on the secure and legally compliant integration of generative AI in the corporate environment, in accordance with the EU AI Act.
  
  
• 2. Incident Response (Digital Forensics & Crisis Management)
  As a BSI-certified service provider for incident response (including qualified APT response to defend against complex, long-term attacks), @-yet offers emergency assistance in the event of a crisis.
  

  Comprehensive Crisis Management: Coordination of immediate responses, containment, and data-driven analysis of cyberattacks.

  Recovery: Support for the secure restoration and emergency operation of the IT infrastructure following a security incident.

  DFIR Framework Agreements: Agreements to ensure prioritized response times (24/7), optimize internal “incident readiness,” and establish predefined processes for faster defense capabilities.

• 3. Compliance & Data Protection
  This area directly links regulatory requirements to the company’s actual IT security practices.
  

  Data Protection Management: Provision of external data protection officers, conducting detailed GDPR audits, and supporting internal data protection teams.

  Information Security Management Systems (ISMS): Support ranging from the planning and implementation of an ISMS through to ISO 27001 certification readiness.

  Regulatory Implementation (e.g., NIS2): Consulting and empowering companies to meet the legal requirements of directives such as NIS2.

  Whistleblower Protection: Establishing clear, legally compliant structures and processes for reporting internal misconduct.

• Training & Awareness
  In addition to technical and organizational measures, @-yet offers practical training, as the human factor plays a central role in the security concept. The spectrum ranges from NIS2 training for executives to general data protection and AI awareness training, as well as raising employee awareness of cyber risks.