Assets and configuration
An inventory that builds itself from agents, network sweeps and whatever else is already reporting. A machine that turns up in a cloud console, an endpoint agent and a network scan is one entry here, not three to reconcile.
Products
Kombine.
Compliance and security operations for organisations in scope of NIS2, DORA and the Lithuanian cybersecurity requirements. It is the only product this company makes.
What it does
Kombine keeps the working record of a company's security: what it owns, what is wrong with it, who is responsible, what has been done, and what proves it. Regulatory obligations are mapped onto that record instead of living beside it in a document. The difference shows up when something changes. A compliance document written in March still says March. A record that reads the systems directly does not.
What it covers
Vulnerabilities and posture
Findings from scanners and endpoint agents, matched against what is actually deployed. End-of-life dates are tracked for the software underneath, because a supported product missing a patch and an unsupported one are different problems with different answers.
Risk and controls
A risk register that links to the assets and suppliers a risk actually concerns. Every control carries the evidence that it operates and the date that evidence last arrived. Undated evidence is not evidence.
Suppliers
Third-party risk: evaluations, questionnaires sent and returned, reviews that recur without anyone having to remember them, and the link between a supplier and the things that stop working if it does.
Requests and incidents
Service requests and incidents with service-level targets. The operational record and the compliance record are one record, so closing a ticket is also closing a finding.
Reporting
The packs a regulator, a board or a customer asks for, built from live data. If a number in a report looks wrong, it can be followed back to the system that produced it.
Kombine has its own site
The division of labour is simple. kombine.work sells the product: pricing, documentation, the security model, a walkthrough. kontratek.lt is the company that has to stand behind it. Plenty of people read them in that order, and they are right to.
What comes next
Kombine is the only product, and that is a commitment more than a stage. A company with two products has to decide every quarter which one gets the week. We do not have that meeting. If a second product ever appears it will be because customers who already have the first one asked for it, and it will show up on this page before it shows up anywhere else.