Local authorities
IT monitoring for local authorities, built for a small team
A town hall, its schools, the library, the council depot, a civil registry that must never stop, and often two or three people to keep it all going. Local authorities are among the favourite targets of ransomware, and when their services go down, everyone notices straight away. FirstSI gives that small team an overview of its whole IT estate, and warns it before residents do.
Open-access demo, no sign-up: 138 fictional machines and all twelve modules.
SERVICES civil registry, family portal and email available
SCHOOLS primary school link: 3 drop-outs since 8 am
DIRECTORY account of a staff member who left in June, still active
CAPACITY town hall file server: full in 23 days
BACKUPS all databases backed up overnight
Your constraints, and what FirstSI changes
Two or three people for everything
Nobody has time to check five consoles. FirstSI brings availability, network, directory, backups and security together on one screen, and only disturbs you for what deserves it.
Sites spread far and wide
Schools, library, depot, swimming pool: the agent installed on site relays the state of the network and equipment, without opening a single port to the outside. A school that loses its connection shows up on the map.
A favourite target
A user added to the administrators, files deleted in bulk, VPN connections from abroad: the moves that come before an attack are flagged straight away, with the account and the machine.
Public services to keep running
Failing backups, disks filling up and certificates about to expire show up days in advance. You step in while there is still time.
NIS2 and the evidence to provide
Some local authorities fall within the scope of NIS2, depending on their size and their functions. Detection, logging, access reviews: FirstSI provides the records that show it, ready to export.
Your data stays with you
Install it on your own servers or with the hosting provider of your choice, with a retention period you set, from 1 to 365 days. The AI assistant runs on a model installed on your premises.
In the console
Screens from the live demo, with the data of a fictional company.
A Saturday, 6:10 am
The ransomware that never reached the civil registry
A computer in the library, left on since Friday evening, starts renaming files on the common share at 6:10 am. By 6:12 am, hundreds of documents carry the same unknown extension.
FirstSI connects the signals: mass renaming on the share, then contact with a domain known for controlling ransomware. The on-call IT manager receives a single incident on their phone, with the computer and the account involved.
At 6:25 am, the computer is unplugged and the account disabled. On Monday morning, the civil registry opens on time, and the affected files are restored from the overnight backup, exact list in hand.
06:10 FILES files being renamed one after another on the common share
06:12 FILES 640 files renamed, same unknown extension
06:13 DNS library computer in contact with a malicious domain
06:13 ALERT on-call manager notified
06:25 RESOLVED computer isolated, account disabled
How it works
The town hall servers first
The agent installs on the main servers in a few minutes, and the first useful alerts arrive the same day.
Then the sites, one by one
Each school or facility gets its own agent, which also acts as a relay for the site network.
Settings that fit the way you work
Thresholds, maintenance windows and alert recipients adjust to your working hours and your on-call rota.
Frequently asked questions
My council is small: can I still use FirstSI?
Yes. The console is the same whatever the size, and you switch on only the modules you need. A team of two uses it every day.
My schools have separate networks: is that a problem?
No. The site agent connects out to your FirstSI server, through a relay or a proxy if needed, and nothing comes in. A site with no direct Internet access stays covered.
Does FirstSI help me with NIS2?
If your authority is in scope, it provides some of the expected building blocks: incident detection, logging, access reviews, traceability of changes. It replaces neither the risk analysis nor the regulatory steps.
Does my residents' data pass through FirstSI?
FirstSI does not read the content of files. It sees who accesses what and when, the flows and the state of the machines, and you choose the retention period.
Can I also monitor the bodies attached to my council, such as an arm's-length company?
Yes. The platform is multi-tenant: each body can have its own separate space, with its own rules, in the same console.
More questions about installation, hosting, GDPR or integrations? All frequently asked questions
Take it further
The same data serves more than one purpose. These pages show it from other angles.
Unified IT monitoring
Twelve modules, one console, a single agent.
Learn more Multi-site networkMulti-site network monitoring
SD-WAN, tunnels, Wi-Fi, carrier links.
Learn more Files and sharesFiles and shares
Who opened what, and who is allowed to.
Learn moreIn the documentation
Your team is small, your area is not
A guided demonstration on a complete fictional estate, with its remote sites, its backups and its alerts.