Managed security software

Ready-to-use security building blocks

Password vault, sovereign VPN/proxy, anti-bot/WAF, encrypted backup, hardened frontends. Our security tools switch on in minutes, stay up to date, and run on self-hosted infrastructure in Europe — with no third-party telemetry. You get real protection without juggling six different vendors’ apps.

This is security built as a managed service: we install, host, update and administer it. You keep the use of it and control of your data.

Who it’s for

• Individuals and families — you want real protection (passwords, VPN, backup) without becoming a system administrator. The Essential tier is enough.
• SMBs — you want a password manager, a VPN and a backup bundled on one invoice, managed per seat.
• Communities and creators — you want a managed anti-bot and WAF in front of your sites, without configuring Anubis or CrowdSec yourself.

What’s managed

Responsibilities are split clearly and in writing:

• We manage: installation, updates and hosting (self-hosted in the EU).
• We manage: organisation admin — vault collections, VPN peers, WAF rules.
• We manage: monitoring, password-leak alerting and backup restores.
• You manage: day-to-day usage and your hygiene decisions (who shares what, which passwords to change).

Features included

• Managed password vault: organisation, team sharing, weak/reused password audit
• Sovereign VPN/proxy (managed WireGuard), no logs, EU-hosted
• Managed anti-bot + WAF (OWASP rules) in front of your sites
• End-to-end encrypted backup, off-site in a second EU region
• Optional hardened / privacy frontends in the bundle
• Near-real-time password-leak alerting
• Backup restore within 2 hours
• FR + EN support, VPN peer added same business day (within 1 hour on Signature)

The Essential, Pro and Signature tiers, with their published prices and quotas, are detailed in the table below, in individual and business versions.

Security included

Every module runs on our self-hosted infrastructure in Europe, with no telemetry sold to third parties. The vault is encrypted, the VPN keeps no logs, backups are end-to-end encrypted. We keep the tools patched and monitored; you keep control of your access and stay exportable at any time.

Frequently asked questions

How is this better than 1Password or NordVPN? It’s sovereign, self-hosted and brought together with one provider, with no third-party telemetry. You replace several subscriptions with one managed offering, backed by support that answers in French and English.

Where is my data? On our infrastructure in the European Union, with an encrypted backup in a second EU region. No data leaves the EU.

Does the VPN keep logs? No. The VPN is no-logs: we don’t keep a history of your traffic. We state this plainly in the contract.

Can I share access across a team? Yes. The vault manages team collections and shares, with a weak/reused password audit included from the Pro tier.

Can I export everything if I leave? Any time, in open formats. Your passwords, backups and configurations stay yours.

Go further

Make Kovant your single provider: add server hardening, a managed Nextcloud or IT support — one contract, one invoice, one SLA.