ការពារស្ថាប័នរបស់អ្នកពីការវាយប្រហារតាមអ៊ីនធឺណិត

Protecting organisations from cyber attacks, together

A community security platform for companies, schools, NGOs and public offices. Your websites and servers can be hosted anywhere. It watches your websites and servers, blocks attackers automatically and alerts you in Telegram, so a small IT team can defend like a large one.

How it works

របៀបដែលវាដំណើរការ

This is how we help mitigate your risk

  1. ConnectUpload one small file to your website or server. It already contains your key, so there is nothing to configure.
  2. WatchYour site reports who visits and who tries to log in. Your pages, posts and customer data are never sent.
  3. DetectThe platform recognises attacks such as password guessing, scanning and known attacker addresses seen by other members.
  4. BlockThe attacker is refused on your website and servers, usually within a minute, while normal visitors carry on.
  5. Alert and learnYour team gets a Telegram message with buttons to block or allow. Each attack teaches the platform, so every member is protected sooner.

We do not publish the exact detection rules or limits. Keeping them private is part of the protection.

How we help you stay safe

របៀបដែលយើងជួយអ្នកឱ្យមានសុវត្ថិភាព

ScanFind your weak spots first

We check your domains and servers from the Internet like an attacker would: open ports (SSH, RDP, databases), old SSH versions with known CVEs, expiring TLS certificates, missing security headers and forgotten subdomains.

DetectSee attacks as they happen

A small agent on your Linux or Windows servers, or a plugin for PHP, WordPress and Node.js sites, spots SQL injection, XSS, brute-force logins, scanners and floods in real time.

BlockStop attackers everywhere at once

One block applies within a minute on Cloudflare, on fail2ban on every one of your servers, on Wazuh agents and on MikroTik/FortiGate. Blocked visitors see a page saying their IP, location and ISP were recorded.

AlertTelegram alerts in your own group

Your own bot and group. Every attacker gets one thread with buttons: Block 24 h, Block 7 d, Unblock, Allow, Report to ISP. Email only for critical events, so nothing floods.

ReportTell the attacker's provider

We find the ISP's abuse contact and draft a report with the times and attack types. You approve it, and replies come back to the same case.

MapKnow where attacks come from

A live map of attacking IPs with country, city and network, plus the top attacking providers this week.

DefendDDoS protection

When traffic jumps far above your normal level, Cloudflare "Under Attack" mode switches on by itself and switches off when it is calm again.

HardenWazuh endpoint security

File-change monitoring that catches webshells and backdoors, malware and rootkit checks, CVEs in installed packages, CIS hardening scores, and locking an account that was broken into.

IntelThreat intelligence feeds

abuse.ch, CISA known-exploited vulnerabilities, Tor exits and blocklists, updated every hour. If your own IP or domain shows up in a feed, you hear about it first.

BrandPhishing and leaks

Lookalike domains that imitate your name, phishing certificates using your brand, and staff emails found in data breaches.

CodeCode and backdoor monitoring - every platform

Works on shared hosting (through the website plugin) and on Linux and Windows servers (through the agent). Every code file is checked for backdoors, webshells, hidden code, PHP in upload folders and changed WordPress core files, with plain-language advice for owners who do not read code. A file flagged as malicious is then watched: every IP that calls it is recorded with location and provider, blocked, and learned from, so the same attackers are recognised on the sites of other members.

LearnLearns what is normal for you

Logins from a new country or network at an unusual hour, sudden spikes of errors, spam or DNS queries: the platform learns your normal and flags what is not.

RespondOne-click response playbooks

Run a fixed, signed action on a server from the portal: malware sweep, malicious cron check, disable FTP, harden SSH, or restore WordPress core files. The agent refuses anything not on the list, and every result reaches Telegram and the audit log.

RecoverBackups that leave the server

Nightly backups are copied to a second server, encrypted where they hold platform keys, and restored into a test database every week to prove they work. A missed or failed backup sends an alert.

Always onTwo servers, automatic takeover

The platform runs on two servers in different countries with a live copy of all data. If one stops, the other takes over by itself in about two minutes, and blocking keeps working on your sites the whole time.

WatchMonitoring that watches itself

A separate server checks the platform every minute and alerts if it stops answering, so an outage of the monitoring itself never goes unnoticed.

What we support

ប្រព័ន្ធ និងឧបករណ៍ដែលយើងគាំទ្រ

🌐Websites (CMS)

  • WordPress
  • Joomla
  • Drupal
  • Moodle (e-learning)
  • Magento / Adobe Commerce
  • PrestaShop, OpenCart
  • phpBB, MediaWiki
  • Nextcloud

🧩Web apps and frameworks

  • Any PHP site (PHP 7.0 and newer)
  • Laravel, Symfony, CodeIgniter
  • Node.js / Express
  • Python: Django, Flask, FastAPI
  • Odoo
  • Any other app behind nginx or Apache

🖥Servers

  • Linux: Ubuntu, Debian, CentOS / RHEL / AlmaLinux / Rocky
  • Windows Server
  • Web servers: nginx, Apache, IIS
  • Logins: SSH, RDP, mail (SMTP / IMAP)
  • cPanel, aaPanel and other hosting panels

💻Computers (Wazuh)

  • Windows PCs and laptops
  • Linux desktops and servers
  • macOS
  • File changes, malware and rootkit checks
  • Missing security updates (CVEs)

🛡Network and firewalls

  • Cloudflare (block lists, DDoS "Under Attack")
  • fail2ban
  • MikroTik
  • FortiGate
  • Wazuh active response

🔔Alerts and reports

  • Telegram (your own bot and group)
  • Email for critical events
  • Attack map and location reports (PDF)
  • Read-only API for your SIEM or dashboards
  • Grafana dashboards

Not on the list? If it writes a log file or runs on a server with nginx, Apache or IIS, the server agent covers it.

Who we are

យើងជានរណា

CyberDefense is a community security service built and run by VIT Solutions. Large companies have security teams watching their systems day and night; most schools, NGOs, small businesses and public offices do not. We built this platform so they can have the same kind of protection, free for the community.

Every member makes the others safer: when an attacker hits one organisation, the platform learns it and can warn and protect everyone else sooner.

What we can help with

  • Finding weak spots in your websites and servers before attackers do
  • Stopping password guessing, scanners and common web attacks
  • Blocking attackers on all your sites and servers at once
  • Warning you about new vulnerabilities in the software you use, with steps to fix them
  • Spotting changed files, backdoors and unusual logins
  • Reporting attackers to their Internet provider
  • Advice when you are not sure what an alert means

What you can expect once it is set up

  • Your sites appear as connected in the portal minutes after you upload the file or install the agent
  • Attacks show up in near real time - who, from where, what they tried
  • Attackers are blocked automatically, usually within a minute, if you turn on automatic blocking
  • A Telegram message for serious events, with buttons to block, allow or report
  • A list of weak spots on your domains, each with how to fix it
  • Clear reports - attack map and location reports you can print or send to management

What we need from you

  • Install the file or agent where the guide says, and keep it installed
  • Connect your Telegram group, and read the alerts
  • Fix the weak spots we find and keep your software updated
  • Use strong passwords and two-factor login, and keep tested backups
  • Add only systems your organisation owns or manages

An honest promise

ការសន្យាដោយស្មោះត្រង់

No security system can make you 100% safe - and no honest one will say so. CyberDefense lowers your risk: it finds weak spots before attackers do, blocks attacks as they happen and warns you quickly, so you can protect your data and your customers.

It works best together with good basics: keep your software updated, use strong passwords and two-factor login, and keep backups you have tested.

គ្មានប្រព័ន្ធសុវត្ថិភាពណាអាចការពារបាន ១០០% ទេ។ យើងជួយកាត់បន្ថយហានិភ័យ និងការពារទិន្នន័យរបស់អ្នកពីអ្នកវាយប្រហារ។

Your data stays yours

ទិន្នន័យរបស់អ្នកនៅតែជារបស់អ្នក

  • Each organisation is separate. The database itself refuses to show one organisation's data to another.
  • Your own Telegram bot and group. Two organisations can never share one.
  • Your own keys. Agent keys and API tokens work only for your organisation.
  • Your own Wazuh. Connect your own manager, or use the shared one where you see only your hosts.
  • Only what you own. You add only domains and servers your organisation owns or manages.
  • Every action is logged. Blocks, unblocks and reports are in your audit log with who did them.

Start in three steps

ចាប់ផ្តើមក្នុងបីជំហាន

  1. RegisterYour organisation's name and a work email. You become its administrator.
  2. Confirm in TelegramOpen the link, press Start. We review each new organisation and message you when it is approved.
  3. Add your systemsAdd your domains for scanning, install the agent on your servers and connect your Telegram group.

Register your organisation