One control tower for all your security
Firewall, email, events and access aren't four products you have to get talking to each other. They work together, they're managed from one place, and your IT provider can look after them.
The problem
Firewall, email, access and event logs are often separate products, from different vendors, each with its own console. A sign-in attempt spotted by one doesn't reach the others, and a signal that looks harmless on its own stays harmless.
In CybeTower these elements talk to each other: they are built on the same backend, so what one module collects is available to the others, with no integrations to buy and maintain.
Where to start
If your company has no IT department, start with the problem you've already seen happen, or the one you're worried about. Here are the most common ones, and the module that deals with each.
An email arrives that looks like it comes from your usual supplier and asks you to pay into a new account. CybeTower Bastion Mail looks for the typical signs of this kind of fraud and flags suspicious messages. Even so, checking every change of bank details by phone is still the rule.
Handled by: CybeTower Bastion Mail
When an online service suffers a data theft, email addresses and passwords end up in lists that get passed around. CybeTower Radar checks whether your company's addresses appear in known data breaches and alerts you, including on your phone.
Handled by: CybeTower Radar
Malicious software usually tries to contact the outside world. CybeTower Bastion Network, the firewall, flags it when a computer on your network communicates with an address known to be malicious, and can block these connections.
Handled by: CybeTower Bastion Network
You don't have to become an expert. If your IT provider is one of our partners, they manage the platform for you and stay your point of contact. You can forward this page to them.
Handled by: Your IT provider
How they work together
The advantage of having a single backend is that a signal collected by one module can become an action on another, with no integrations to buy.
Agents and firewalls send events and logs to the shared backend.
Events are normalised, linked together and classified.
Response policies can trigger blocking on the managed devices.
Every action remains recorded and available for review.
The modules
Most people start with CybeTower Bastion Network, the firewall: even on its own it sees what leaves your network. Every other module also works on its own and can be added when you need it.
Four modules that protect the points where traffic enters and leaves the company: the network, published applications, email and the links between sites. They are managed from the same console and activated separately.
The CybeTower firewall, on a dedicated appliance or a virtual machine, for all your sites from one console. It sees traffic leaving your network for malicious addresses.
Protects the websites and applications you publish on the internet.
Filters email fraud, spam and malicious content before it reaches your inbox.
Connects sites, devices and people without configuring tunnels by hand.
CybeTower NEXUS, CybeTower SHIELD and CybeTower Sentinel share the same data and the same management as the Bastion family. CybeTower Radar, on the other hand, is a separate service, with its own sign-in.
Collects and links together events from your whole infrastructure.
Collects logs from the infrastructure, normalises them, applies detection rules and correlates events into incidents. It includes an on-premises collector and a cross-platform agent for the systems you want to monitor.
One sign-in for all consoles, with multi-factor authentication.
Single sign-on to all consoles and, where needed, to business applications: multi-factor authentication with one-time codes and hardware keys or passkeys, roles and permissions per organisation, a log of sign-ins and changes.
Watches over the internal network and reports what changes.
Monitoring of the internal network and threat detection on systems: it identifies file tampering, anomalous processes and services, access attempts, local network manipulation and concealment tools. It keeps an inventory of what is connected and tracks the status of updates.
Checks whether the company's credentials appear in known data breaches.
Credential monitoring: it checks whether the company's email addresses appear in known data breaches and alerts you when that happens. It is used on its own, with its own sign-in, even without the other modules.
Why CybeTower
You start with one module and add the others when you need them. Licensing is per module, and the software enforces it.
A single, shared backend. Data moves from one module to another with no connectors to set up and maintain.
The configuration of some widely used firewalls can be imported, and the CybeTower configuration can be exported: device configuration, firewall rules in CSV format, the audit log. Anyone who joins knows they can leave.
Where the data is
Configurations, including the certificates for remote access, stay on your devices. The logs that CybeTower NEXUS links together are processed on our servers, in Swiss data centres.
Who manages it
The platform is the same: what changes is who keeps an eye on it every day.
You manage it from the console: modules, devices, users and alerts, all from the same place.
If they are one of our partners, they manage it for you alongside their other customers, each with their own separate data, and stay your point of contact.
For some long-standing customers we manage it directly: this way the people who develop CybeTower see real threats every day. We refer new customers to our partners.
For partners
If you are an IT provider or run security services for other companies, you can look after all your customers from a single console.
Customers who come through a partner remain the partner's customers.
Partners get technical support from us, in Ticino, straight from the people who develop CybeTower.
The terms of the partnership are agreed directly with each partner.
FAQ
No. Each module works on its own and is activated separately: you start with what you need and add the others when it makes sense.
From some widely used firewalls, yes, but not from all of them. CybeTower Bastion Network replaces the firewall you have and, if it is one of the supported ones, imports its configuration: rules, address translation (NAT), private networks (VPN) and local users do not have to be rewritten by hand. Before anything is applied, a preview shows what will change.
CybeTower Radar checks whether company credentials appear in known data breaches and runs on a separate platform. The other modules protect the infrastructure: network, email, events and access.
It's up to you. You can manage it yourself from the console, entrust it to your IT provider if they are one of our partners or, for some customers, we manage it directly.
Configurations, including the certificates for remote access, stay on the devices at your premises. The logs collected by CybeTower NEXUS are processed on our servers, in two Swiss data centres in the Canton of Zurich and the Canton of Bern, so that they can be linked together across all your devices. The backup copy is kept at the other data centre: the logs and their copies stay in Switzerland. The alerts you choose to receive on Telegram or Pushover, however, pass through those services' servers.
CybeTower Bastion Mail looks for the typical signs of email fraud, such as a message impersonating a supplier to get you to change bank details, and flags suspicious messages. No filter is infallible: it is still good practice to check every change of bank details by phone.
It reduces the opportunities for an attack and shortens your reaction time, but it can't make an attack impossible. CybeTower Bastion Mail filters email with malicious content. CybeTower Bastion Network flags it when a computer on your network starts communicating with an address known to be malicious, a signal to look at straight away, and can block these connections. It does not replace backups: if an attack succeeds anyway, they are what gets you back to work.
Yes. The platform manages multiple customers from a single console, with each organisation's data kept separate. You'll find the details in the partners section.
Yes. The CybeTower Bastion family has four modules: Network for firewalls, Application for published applications, Mail for email and Link for the links between sites. They can be activated together or separately.
