Email fraud, ransomware and accounts without MFA hit SMEs every day. Firewall, endpoints, accounts and backups protected and watched, with alerts handled by our team. No-obligation proposal.
More than 10 workstations · support contract · remote, on-site and phone support
For decision-makers short on time.
DataRoad - IT Services and Consulting runs the cybersecurity of businesses with more than 10 workstations: firewall, computers, servers, email, accounts and backups monitored and corrected every day, for a fixed monthly fee, so that an attack does not stop the business. We are one of the reference providers of managed cybersecurity in Portugal, headquartered in Alfragide with on-site support across the country. We also serve international companies established in Portugal and teams in Europe and the United States. In 11 years of operation, DataRoad has never suffered a security incident.
A single ransomware attack can halt invoicing, email and production for several days and cost tens of thousands of euros. More than half of the attacks recorded in Portugal target SMEs. Attackers do not choose by size; they choose by weakness.
The way in is rarely sophisticated. It is a well-written fake message, a password reused across three services, remote access opened without control or a supplier that has already been compromised. Each of these gaps is closed with operational discipline, not with yet another licence nobody looks after.
That is why we treat security as part of the same management that runs your network and your IT estate, with a technical team certified by Fortinet, Sophos, Cisco and Microsoft.
| Approach | What happens | Result |
|---|---|---|
| Software bought and left running | Nobody tunes rules or reads alerts. | The defence ages faster than the threats. |
| An audit once a year | A good document that nobody acts on. | The gaps found remain open. |
| Cybersecurity managed by DataRoad | Daily operation, monitoring, threat response and constant adjustment. | Less risk every month, with a single accountable contact. |
Managed cybersecurity is part of the IT Unlimited plans: workstation protection, access rules, backups and monitoring are covered by the monthly fee, with no hours counted. Annual contract with automatic renewal and no lock-in period.
A new firewall, network segmentation, an audit or GDPR compliance work are quoted separately, with scope and price agreed in writing before any work begins. See how the monthly fee is calculated.
Chosen by respected and international companies
![MUN[it]](/assets/img/logos-c/munit.webp "MUN[it]"){kind=small}
★★★★★ 5,0 · 52 Google reviewsIt depends on your activity and size. The NIS2 directive was transposed into Portuguese law by Decree-Law 125/2025, requires in-scope entities to register on MyCiber and sets fines of up to 10 million euros. Healthcare, energy, transport, digital services, the public sector and their suppliers may be covered. Its requirements (risk management, backups, access control, incident handling and training) match what we operate every day.
Check whether NIS2 covers your organisation, use the security checklist for SMEs and learn about the invoice fraud with a swapped IBAN.
11 years in the market, since 2015. 232 clients. Top 5% SME, according to scoring.pt. 5.0 from 52 Google reviews. 1,321 Ubiquiti devices and more than 138 sites under management. No security incident at DataRoad in 11 years. Some published projects with the client's name:
We have also published an infrastructure project for the car rental sector. The full list is in our case studies.
Yes, it is. Attacks run automatically in search of weak defences, regardless of company size, which is why SMEs account for most victims in Portugal. A 15-person company has invoicing, client data and bank accounts, which is enough to make the attempt worthwhile. Protection has to be proportionate, but it has to exist and it has to be operated.
No, it is not. Traditional antivirus recognises malicious files that are already catalogued, but today intrusions arrive mainly through fake messages, stolen credentials and poorly protected remote access. Only a layered defence closes those routes: a managed firewall, EDR with automatic isolation, email filtering, MFA and tested backups, all overseen by a team that reads and acts on the alerts.
Yes, security operations are included in the monthly fee. Workstation and server protection, email filtering, access rules, verified backups and monitoring are sized for your company and are not billed by the hour. The managed firewall is included in Premium and Premium 365. Monitoring exists on every plan, but only Premium 365 guarantees it 24/7. New equipment and projects are quoted separately.
We immediately isolate the affected device and restore data from backups that have already been tested. The crisis procedure is written before the incident: who is contacted, which machines are isolated first, how staff are informed and when the authorities are notified. The board is kept informed at every stage, in plain language, and receives a final report on what happened and what changed.
It helps directly. Access control, backups, data protection, event logging and incident handling are the technical foundation of the GDPR and match the requirements of NIS2. We deliver documentation ready for your data protection officer and, with no commitment, assess with you whether your activity falls under Decree-Law 125/2025.
Critical protections go live within the first few weeks. We start with what reduces risk the most, such as MFA, email, firewall and off-site backups, and the remaining layers follow in order of risk, without stopping the business. Once implementation is complete, continuous operation begins straight away, with monitoring, updates, restore tests and reporting to the board.
We show you where the company is exposed, without jargon, and deliver a plan with clear priorities and prices. Request a security assessment or contact our sales team.
More than 10 workstations · support contract · remote, on-site and telephone support. Call +351 211 459 950 * or email sales@dataroad.pt.
*Call to a Portuguese landline. We do IT right.
A French group founded in 1984 hands a Portuguese MSP the infrastructure of Antony, Wissous and Vialonga: high-availability firewalls, fibre…
· 4 min read
A sixth project for the same public body since 2019: when a tender goes to the same company again, it is the previous network doing the talk…
· 6 min read
The same security architecture for every client, operated rather than merely installed. In 11 years, DataRoad has never suffered a security …
· 8 min read
A network made of different brands and installers fails at the joins. DataRoad has managed more than 138 Ubiquiti UniFi sites on the same te…
· 3 min readA premium Portuguese MSP at a French group's headquarters: the audit of France Affiches' network and systems was done on site in Paris and d…
· 4 min read
Paying for a provider's offices speeds nothing up. Immediate remote support, an in-house datacentre and on-site work only when the network c…
· 5 min read
A public tender gives no second chances. Since 2017, eight public bodies, from RTP to SSAP, have awarded DataRoad 24 IT contracts, all verif…
· 5 min read
Embassy of Korea, Consulate of Brazil, DCIAP, Reltio by SAP, beQom, Mitrelli Group: organisations that demand written guarantees chose DataR…
· 4 min read
Whoever chooses the IT partner for a subsidiary in Portugal is often in Geneva or New York. DataRoad's website now speaks the language of th…
· 4 min readNumbers you can verify
Partners and certifications
DataRoad · Managed cybersecurity
Security is proven over years, not promises. Managed firewalls, MFA, endpoint protection and tested backups, the same standard for every client.
We do IT right.
IT Unlimited reduces risk and shows in writing what changed.
More than 10 workstations · support contract · remote, on-site and phone support
DataRoad works only for companies under an IT Unlimited contract. We do not take subcontracted work or one-off call-outs.
