waf2026
CSOG WAF
Our own WAF: reverse proxy, ML anomaly-detection module, client agent and centralised configs. OWASP Top 10 protection, rate limiting, bot protection.
PythonNginxMLPHPDocker
CSOGEnterprise levelprotection
We implement cybersecurity — WAF, monitoring, SIEM/SOC, EDR, hardening, pentest — and build IT: websites, web and mobile apps, CRM/ERP, bots and AI integrations
100%
Technical projects
24/7
Monitoring and protection
▸Deploy▸Configure▸Integrate▸Test▸Support▸Deploy▸Configure▸Integrate▸Test▸Support▸Deploy▸Configure▸Integrate▸Test▸Support▸Deploy▸Configure▸Integrate▸Test▸Support
●●●01about
About us
CSOG — a team of cybersecurity and DevOps engineers.
▸ mission
We execute technical projects to protect infrastructure, web resources, and applications.
DeployConfigureIntegrateTestSupport
▸ status
- 100%
- Technical projects
- 24/7
- Monitoring and protection
- SOC
- SIEM · EDR · WAF
- UZ
- Tashkent · made local
●●●02services
Services
Cybersecurity and IT engineering: from WAF and SOC to web platforms, mobile apps and AI automation
waf
WAF — implementation and configuration
WAF implementation for protecting sites, portals and APIs from attacks.
- WAF setup (cloud / on-prem)
- Rules and policies configuration
- OWASP Top 10 protection
- Rate limiting / bot protection
mon
Monitoring System
We deploy infrastructure and security monitoring systems.
- Server monitoring
- Service monitoring
- Centralized log collection
- NOC/SOC dashboards
siem
SIEM — collection and correlation
SIEM implementation: event collection, correlation, threat detection.
- Log source configuration
- Correlation rules
- Client use cases
- EDR/WAF/IDS integration
soc
SOC — deployment
Building SOC processes and infrastructure.
- SOC architecture
- Response playbooks
- Incident response pipeline
edr
EDR/XDR
Endpoint security implementation projects.
- Agent installation
- Protection policies
- Threat blocking
hard
Hardening
Configuration hardening and closing typical threats.
- Linux/Windows hardening
- Web servers hardening
- Baseline configurations
net
Network Security
We execute network protection projects.
- Firewall policies
- Network segmentation
- VPN implementation
vuln
Vulnerability Management
Building vulnerability management process.
- Automated scanning
- Remediation plan
pen
Pentest
Infrastructure testing through attacks.
- Web / API / Infrastructure
- PoC evidence
app
AppSec
Security in development.
- Code review
- SAST/DAST
ir
Incident Response
Incident response and recovery.
- Infected device isolation
- Log/traffic analysis
land
Landing page
A single-page site to launch a product or service.
- 1–3 sections
- CMS-ready
- Analytics and lead form
$1,000
site
Corporate website
A multi-page site with CMS and multiple languages.
- CMS and editor roles
- Multi-language
- SEO bundle and analytics
$2,500
plat
Custom web platform
Architecture built for the job: marketplaces, portals, headless.
- Architecture design
- Marketplaces and portals
- Headless CMS / API-first
on request
app
Web applications
SPA and SSR apps with auth and payments.
- React / Next.js + Node
- Auth and roles
- Click / Payme / Stripe
$3,500
mob
Mobile applications
iOS and Android — native or Flutter / React Native.
- iOS + Android
- Offline mode
- Store publishing
$4,000
exe
Desktop software
Windows and cross-platform apps with auto-update.
- Windows / cross-platform
- Auto-update
- Code signing
$3,000
crm
CRM systems
Pipelines, roles, reporting and integrations for your process.
- Pipelines and deal stages
- Roles and permissions
- Reports and dashboards
$5,000
erp
ERP systems
A modular loop: finance, inventory, HR, production.
- Modular architecture
- Finance, inventory, HR
- Bank and 1C integrations
on request
tg
Telegram bot
A bot with an admin panel and multi-step flows.
- Bot API and admin panel
- Multi-step scenarios
- Payment handling
$1,500
wa
WhatsApp bot
Official WhatsApp Business API with message templates.
- WhatsApp Business API
- Message templates
- CRM integration
$1,500
chat
Website chatbot
An embedded widget that hands off to a live agent.
- Embedded widget
- Live-agent handoff
- Conversation analytics
$1,200
rag
AI chatbot on your knowledge base
Answers from your documents instead of making things up.
- Knowledge base ingestion
- RAG and vector search
- Answers with source links
$2,000
gpt
GPT integration
Wiring models into your products and processes.
- OpenAI / Anthropic API
- Function calling
- Response streaming
$2,500
auto
AI business automation
End-to-end agentic flows instead of manual work.
- End-to-end agentic flows
- Multi-tool orchestration
- Integration with your systems
on request
ci
DevOps and CI/CD
Build, test and deploy with no manual steps.
- Docker and orchestration
- Jenkins / GitHub Actions
- Auto-deploy and rollback
on request
infra
Hosting and infrastructure
Servers, domains, mail and DNS, end to end.
- Servers, domains, TLS
- Mail loop and DNS
- 24/7 availability monitoring
on request
sup
Support and maintenance
Updates, backups and incident response.
- Updates and backups
- Incident response
- Monthly report
$300/mo
Prices are indicative. The final quote follows requirements gathering.
●●●03portfolio
Portfolio
Projects we designed, built and keep running in production
dlp2026
Bank, Uzbekistan
DLP System
A complete DLP system for a bank: event ingest server, analyst desktop console and a hidden Windows agent. Two ready installers, silent GPO/SCCM rollout.
Node.jsExpressWebSocketElectronReactGoWindows Service
Under NDA
mon2026
Bank, Uzbekistan
Monitoring System
Employee activity control and leak prevention: card numbers via the Luhn check, passport and tax IDs, on-screen OCR, clipboard monitoring, video capture of critical events.
PythonYOLOOCRPostgreSQLDocker
Under NDA
tkt2026
Olbilet
A full-cycle ticketing platform: listings, sales and refunds, organiser and merchant consoles, role model, cinema integrations and a mobile scanner at the gate.
DjangoDRFReactNext.jsPostgreSQLFlutterDocker
bh2026
BusinessHome
A multi-service platform of nine separate services: API, CRM with telephony, admin panel, marketplace, 3D and architecture modules, client app. Dedicated production environment and CI.
PythonTypeScriptNext.jsPostgreSQLTelephonyDocker
Platforms
lms2026
AI Academy LMS
An LMS for a charity academy: courses, students, scholarships and a speech-recording panel that simultaneously builds a corpus for Uzbek TTS/STT models. Lesson recordings and live view.
NestJSPrismaReactPostgreSQLMinIODocker
View all projects19 projects
●●●04process
How we work
Proven solution implementation process
01step
Requirements analysis and gathering
02step
Architecture design
03step
Implementation and configuration
04step
Testing / attack simulation
05step
Documentation
06step
Support and maintenance
●●●05tech
Technologies
Modern security solutions stack
01
WAF / CDN
02
SIEM
03
IDS / IPS
04
EDR / XDR
05
Monitoring
06
Hardening
07
Firewall
08
SAST / DAST
09
Vulnerability scan
10
Pentest
11
Incident response
12
SOC / NOC
●●●06blog
Soon
▸ /blogwip
Technical breakdowns on WAF, SIEM, and Incident Response. First posts in preparation.
●●●06contact
Ready to discuss your project?
▸ 24/7 SOC▸ on-prem · cloud▸ Tashkent · UZ