Rackone, Acronis Platinum Service Provider, designs and runs managed security services for companies and public bodies, measured by the restore and not by the copy: immutable backup, tested disaster recovery, endpoint protection and a path towards NIS2. One platform, one technical point of contact.
Multi-layer protection
Managed security services are cyber security services run on an organisation's behalf by a specialist provider: the technology, processes and training that protect its data, systems and people from attacks, errors and failures, and let it recover when something breaks. Rackone builds them mainly on Acronis, as Acronis Platinum Service Provider, and runs them with its own systems engineers.
Backup and disaster recovery as a service (BaaS and DRaaS), EDR, XDR and MDR in a single agent and a single console, with Microsoft 365 security, activated and managed by our systems engineers. Italy's national cybersecurity agency (ACN) has qualified the platform as a cloud service for the public administration.
Copies no ransomware can encrypt or delete until the retention period ends, in Italy at the Acronis data center in Rome or in the European Union, as you choose. List-price plans from 50 GB to 5 TB.
Server replication and restart in an Acronis data center, in Rome for Italy, as a service (DRaaS). Configurable RTO and RPO, and an automatic monthly test that starts the recovery servers on an isolated network.
Veeam Backup & Replication for virtual and physical environments, on premises or with a copy replicated to the Rackone cloud.
Free assessment, gap analysis and a compliance plan for Legislative Decree 138/2024, the Italian NIS2 law, with the documentation needed to demonstrate it.
EDR and XDR on servers and PCs detect an attack and stop it; with managed detection and response (MDR), the analysts of the Acronis SOC monitor the alerts around the clock.
Visibility and control over the use of generative AI in the company: it blocks the sharing of sensitive data and harmful prompts.
Mail, OneDrive, SharePoint and Teams copied outside the tenant up to six times a day, with single-item restore. Google Workspace too.
Microsoft Entra ID users, groups, policies and configurations, restorable to a point in time with their relationships intact.
The method
The Clusit 2026 Report, by the Italian association for information security, counts 507 serious incidents in Italy in 2025, 42% more than in 2024: 9.6% of the 5,265 recorded worldwide. With numbers like these, the odds of an attack matter less than the time it takes to recover. Protection is therefore built in three phases, and every service covers one.
A backup that has never been restored is not a backup: the last phase decides how long an outage lasts, and it is where we start.
Prevention
Many attacks come in through an exposed door: a website, a server, a mailbox. These services close it before the backup is needed.
Mail filtering, endpoint protection and cloud backup in sequence: ransomware that gets past the first layer meets the second.
Protection for Linux servers and VPSs against scans, brute-force attacks and malware, with several modules working together.
Filters HTTP traffic between the website and the internet and stops SQL injection and XSS before they reach the application.
A cloud gateway that filters email before the mailboxes: spam, phishing and infected attachments stay out, also in front of an existing mail server.
Website and server monitoring with metrics, blacklist checks and alerts, to detect a problem before it reaches the users.
Certificates that encrypt website traffic and state who is behind it, from domain validation to extended validation (EV).
Filters traffic between the company network and the internet, and between network segments: an on-premises appliance or a virtual firewall in the cloud, with the rules maintained over time.
Turns the factory configuration of Proxmox VE hypervisors, operating systems and exposed web servers into a defensible configuration, with a documented baseline verified over time.
The starting point is the existing setup: if the current backup holds up, the assessment states it, and we step in only where a layer is missing.
Talk to a certified Acronis specialist.
NIS2 is the European directive on the security of network and information systems (Directive (EU) 2022/2555), which each member state transposes into its own law, with its own deadlines. In Italy that law is Legislative Decree 138/2024, in force since 16 October 2024: it covers medium and large companies in the sectors listed in its annexes, and some entities regardless of size. Companies outside its scope often meet it anyway, as suppliers to an entity in scope.
For organisations in Italy listed as NIS entities in 2025, the national cybersecurity agency (ACN, determination 379907 of 19 December 2025) sets two deadlines:
The Italian decree also requires management bodies to follow cyber security training and to promote it among staff. Tested backup and restore, patch and vulnerability management, incident detection and training relate to these measures: our services help you meet them and document them, while compliance remains the responsibility of your organisation.
Data sovereignty
An Italian company, with our own data center in Venice and an Edge network of partner data centers in Italy and Europe, and no transfers outside the EU: you always know where your data resides and who can access it, in line with GDPR and NIS2.
Partner programme
Resell cloud, Proxmox and cyber security under your own brand: a reserved price list, Italian infrastructure and a technical team that works alongside you, never in competition with you.
Securing a company starts with an assessment: what is protected, where the backups are, which systems are exposed and how long it takes to recover. The plan that follows sets the priorities and almost always starts from a tested restore, the phase that decides how long an outage lasts.
No, a backup alone is not enough for ransomware protection: it takes an immutable backup, which an attack cannot encrypt or delete, and a restore tested before the day it is needed. Endpoint protection stops the attack while it is under way, and mail filtering blocks infected attachments before the mailboxes.
No, NIS2 does not apply to every company: in Italy, Legislative Decree 138/2024 covers medium and large companies in the sectors listed in its annexes and some entities regardless of size, and ACN notifies inclusion in the list; elsewhere in the EU, national law sets the scope. Companies outside it often meet NIS2 as suppliers to an entity in scope. For organisations in Italy, the free NIS2 assessment establishes it.
A backup is a copy of the data, from which files, mailboxes or whole servers are restored; disaster recovery is the ability to restart the systems at another site when the main one is unavailable. Backup limits the data lost (RPO), disaster recovery the downtime (RTO): a company that cannot stop needs both.
Yes, managed security services can build on the existing antivirus and backup: the assessment checks whether they hold up, that is whether the copies are immutable and the restore has been tested. If they hold up, the assessment states it, and we step in only where a layer is missing.
Acronis cloud backup data is stored in Italy, at the Acronis data center in Rome, or in the European Union, as you choose, always under the GDPR, and it is not moved without your authorisation. The Italian site serves organisations that must keep the copy in Italy under a contract or an internal policy, and the contract names the data center. With disaster recovery, the systems restart in an Acronis data center, in Rome for Italy.
The cost of managed security services depends on the scope: how many servers, PCs and mailboxes to protect, and with which services. Cloud backup has list-price plans with a monthly fee; the Microsoft 365 security modules are priced per user or per workstation; the other managed services are priced after the assessment, because the price depends on what there is to protect and how quickly it must be running again.
Yes, Rackone's managed security services are available to companies anywhere in the world: backups stay in Italy or in the EU, as you choose, and our team answers in English at the same contacts as for Italian customers.
Share what needs protecting and the risks that concern you: we propose the priorities, including when the current configuration is already adequate.
No obligation · A systems engineer replies, not a salesperson
