Cybersecurity, IT and automation consulting

Networks, servers and building automation that just work

MB Aldarna is a small independent consultancy near Kaunas, Lithuania. We help companies and private clients sort out their network security, IT infrastructure and building automation. Work usually starts with an audit and a plan, and if needed we stay on for the implementation.

  • Freefirst consultation
  • Defensive onlysecurity work
  • LT · EUregistered and working in Lithuania

Main area

Cyber and network security

We work on the defensive side only. We help organisations understand what is running on their networks and connected equipment, and protect it. We do the same with our own cloud platform. In our experience security is rarely decided by a single device or program. It depends on whether someone keeps the whole system in good shape over time.

We usually start with an audit. What is running, who has access, where the data goes, what breaks if one component is compromised. The result is a list of risks with priorities, so the work can be carried out in stages.

All cybersecurity services and how we work

Network and access audit

We list every device, service and open port, and who has access to what. Almost every network has things running only because nobody switched them off. At a medium-sized furniture manufacturer we found a server that had been running for eight years. The service had long since moved to the cloud and hardly anyone remembered what the server was for, yet it was still reachable from the internet. More than once we have come across old cameras that opened ports on the router by themselves through UPnP, twelve-year-old devices carrying every vulnerability discovered since they left the factory.

Segmentation and VLANs

Workstations, servers, guests and automation equipment should be kept apart, so one infected device cannot reach everything. Cameras, IoT devices and guest Wi-Fi go on their own VLANs. Production equipment such as CNC machines or 3D printers gets stricter rules still.

Firewalls and access control

We review the rules and remove what has accumulated on a "leave it for now" basis. Administrative access gets two-factor authentication.

Secure remote work

No services exposed directly to the internet. A VPN, or Zero Trust access through a tunnel such as Cloudflare Tunnel.

Backups and recovery

The 3-2-1 rule and regular restore tests. A backup nobody has ever restored is not a backup yet. We also put in writing what to do if ransomware hits.

Monitoring and incident management

Log collection, alerts on unusual activity and an agreed plan for who does what if an incident occurs.

IoT and automation security

Building controllers and cameras often run for years with factory passwords and firmware that was never updated. We check their access, updates and isolation from the rest of the network.

People and processes

Training staff to recognise fraudulent e-mails and handle passwords properly. In most companies this is the cheapest security improvement there is.

How a security consultation works

  1. 01
    Scope

    We agree what we check, what we do not, and when.

  2. 02
    Audit

    Technical analysis and conversations with the people involved. We also review the documentation, if there is any. Missing documentation is itself a finding.

  3. 03
    Risk report

    What we found, how serious it is, what to do and in what order.

  4. 04
    Implementation and verification

    We help put the changes in place and check that they work. A repeat review later, at a time agreed in advance.

Services

Consulting areas

Four areas, one principle. First we find out what is needed, then we talk about technology.

IT infrastructure consulting

Servers and cloud that run reliably and do not cost more than they should.

  • Linux servers, virtualisation, Docker
  • Cloud and hybrid setups, migration from legacy systems
  • Backup and disaster recovery
  • Monitoring and log analysis
  • Infrastructure audits and cost reduction

Building and home automation consulting

Smart home and building management – heating, lighting, ventilation, security. New buildings, and existing systems that do not work as they should. A common finding is a network left wide open after cameras or other IoT devices were installed.

  • Choosing a solution to suit the building and the budget
  • ALDARNA / AcePRO controller configuration, heating zones, scenes, schedules
  • Device integration over aceBUS, Modbus, HDL, 1-Wire and other protocols
  • Diagnostics of failed sensors, faulty logic and false alarms
  • Remote monitoring and control through ALDARNA Cloud

Software and integration consulting

We connect systems that do not talk to each other and automate repetitive work. We use AI tools where they save time in practice, and leave them out where they would only be for show.

  • API integrations and data exchange
  • Scripts, process automation, AI agents
  • Technical specifications for contractors and review of their work
  • Documentation
  • Independent second opinion on existing software

Network security consulting

How well your network and everything attached to it is protected, and a plan that can realistically be carried out.

  • Network and access audit, vulnerability search
  • Segmentation and firewalls
  • Secure remote work
  • Backup and incident management plan
More about network security

Process

How we work

At every stage you know what is being done and what comes next.

  1. 1

    Conversation

    Free. We find out what you want to achieve and what is in the way.

  2. 2

    Analysis

    An audit of the current situation, including what it costs and who maintains it.

  3. 3

    Recommendations

    A written report with priorities, alternatives and a rough budget.

  4. 4

    Implementation

    We oversee the installation or do the work ourselves.

  5. 5

    Support

    Training, documentation, periodic reviews.

Consulting

Who we are

MB Aldarna is a small independent consultancy, registered in Lithuania on 20 February 2019 (company code 305039889). We do not sell equipment and do not represent any manufacturer, so we can recommend what fits your situation rather than what needs selling.

Every consultation starts with questions. What do you want to achieve? What is not working, or costs too much? What constraints are you working under? Then we assess the setup, write down the gaps and give you a prioritised plan.

The report is often only the beginning. If needed we take on the implementation and deal with contractors on your behalf, and at the end we hand the knowledge over to your team so you are not dependent on us. We also run our own platform, ALDARNA Cloud, so the security rules we recommend are rules we follow ourselves.

Who we work for

Companies, private individuals and public sector organisations in Lithuania and the EU. Only clients whose identity we can confirm, and only systems they control or are entitled to have checked.

What you get

  • A clear assessment

    The current state of the system and its risks, written so that both a manager and an engineer can follow it.

  • A plan with priorities

    What is urgent, what can wait, what it will cost.

  • Solution architecture

    A technical design – components, how they connect, what to require from contractors.

  • Implementation oversight

    We are present during installation and accept the work only against criteria agreed beforehand.

  • Knowledge transfer

    Training and documentation, so you run the system yourselves.

Darius Aleškaitis

Management

Darius Aleškaitis

Head of MB Aldarna and principal consultant

I have worked in IT, networking and electronics since 2001. I started as a network engineer, working with routers, PBX systems and corporate networks, and later designed embedded systems for vehicle tracking and energy management. From 2011 to 2019 I was at UAB Acepro, where I went from chief engineer to CTO/CIO, led the development of a building management ecosystem from the circuit boards up to the servers, and moved the company's infrastructure to the cloud. Over those years, automating everything from private houses to factories, I came to see that what matters is not only the automation but also how secure it is. In 2019 I decided to apply what I knew to security as well, and I have worked through MB Aldarna since.

The security project I remember best is rebuilding the network of a large farm. We split it into isolated segments for internal use, guests, specialised equipment and cameras, and connected the remote sites over IPsec VPN and point-to-point links. Another was a building controller platform with AES encryption, our own protocol and centralised fault monitoring. I have also deployed IoT systems and trained people to use them. Security is more to me than just a job. In times like these, an intruder is much easier to spot when everyone looks after their own devices. Where nobody does, those devices become an open gate into the country's infrastructure.

Technologies

  • Linux
  • Docker
  • Kubernetes
  • Proxmox / KVM
  • MikroTik
  • VPN / IPsec
  • VLANs and segmentation
  • Firewalls
  • Cloudflare Zero Trust
  • C / C++
  • Go
  • Python
  • Embedded systems
  • Machine learning

Education

Electronics and automation at Kaunas University of Technology. In 2013 I completed the Brown University course "Coding the Matrix: Linear Algebra through Computer Science Applications" (via Coursera).

LinkedIn profile

Contact

Let's talk about your task

Write or call. We will talk through what is going on and tell you where it is worth starting. The first conversation carries no obligation.

  • Working hoursMon–Fri 8:00–17:00 (EET)
  • LocationGarliava, Kaunas district · we work throughout Lithuania and remotely

Company details

CompanyMB Aldarna
Company code305039889
AddressDobilų g. 6, Garliava, LT-53250 Kaunas district, Lithuania
BankSwedbank, AB
Account (IBAN)LT25 7300 0101 5790 0571
SWIFT / BICHABALT22