- Home page
- Other projects and services
- Business solutions
- Overview
Overview
CZ.NIC offers a portfolio of professional services and commercial solutions built on its experience in managing critical Internet infrastructure. From DNS services and identity management to advanced security solutions—all with an emphasis on stability, performance, and maximum security.
Domain registry – FRED
FRED is modern, open-source domain registry management software that, thanks to its scalability and performance, is suitable for registries of all sizes.
It offers a wide range of advanced features, such as user-friendly web interfaces for both registry operators and end-users. It also supports the use of verified electronic identities or identity verification systems. We offer guaranteed technical support for both system deployment and long-term maintenance. We are also preparing to offer the FRED system as a service.
DNS software – Knot DNS
Knot DNS is a powerful authoritative DNS server that ensures reliable management and delivery of DNS records for any deployment.
Advanced DNSSEC automation and a wide range of features are standard. We offer professional support, particularly for TLD registries and DNS operators. Our commercial plans include various levels of support and fast response times.
DNS anycast hosting for TLD
For TLD registries, we offer DNS hosting on an anycast infrastructure built with a focus on maximum stability, robustness, resilience, performance, and software and hardware diversity.
The infrastructure is deployed globally across all continents, provides a total usable capacity of over 1 Tbps, offers protection against DDoS attacks, and, thanks to XDP technology, is highly energy-efficient—resulting in a significantly lower carbon footprint compared to an equally powerful infrastructure without XDP. We offer other TLD registries the service of hosting their zones on our anycast network. Of course, 24/7 technical support is included.
DNS software – Knot Resolver
Knot Resolver is a powerful recursive DNS resolver designed for modern networks. Thanks to its modular architecture, it offers high flexibility, scalability, and secure operation with the ability to filter queries.
We offer planning and deployment services for Knot Resolver, and we assist with its configuration and tuning. Across all SLA tiers, we provide rapid error resolution and consultation on operational issues. We are also able to develop and implement custom software modifications.
Secure DNS software solution – DNS Patrol
It monitors and analyzes DNS traffic in real time and helps block malicious domains. DNS Patrol focuses on detecting phishing, malware, and other risks.
DNS Patrol is designed for organizations and companies that want to protect their users and devices from cyber threats at the DNS level.
DNS hosting and security for sritical domains – VIP Domain
The VIP Domain service is designed for mission-critical domains that must operate with complete stability and speed, withstand cyberattacks, and meet high security and performance standards.
The service provides the most robust, resilient, and high-performance DNS hosting on the .CZ national domain’s DNS anycast network, protects against the risk of unauthorized or fraudulent changes, and ensures compliance with security, cryptographic, and technical standards. We offer hosting for your domain based on one of three SLA levels, including 24/7 support and dedicated consultation hours with a specialized technical team.
Internet routing daemon – BIRD
BIRD is an open-source routing daemon and the software of choice for Internet peering centers. It is also used in CDNs and similar data centers on border routers and for collecting data on global routing.
Extensions to support EVPN in the BGP protocol are currently under development; you can help accelerate development by purchasing technical support for BIRD. We offer priority technical support services with a strong emphasis on smooth operation and long-term sustainability. Development plans reflect the composition of our customer base. We also provide custom functionality upon request.
Network hardware devices – Turris
Turris is a line of high-performance routers designed to provide secure connectivity for homes and small offices. It offers automatic updates, a distributed adaptive firewall, and a wide range of features thanks to its OpenWrt-based system.
We offer partnerships with resellers and distributors worldwide. If interested, we also offer device customization (white labeling), whether it involves branding alone or tailored hardware or software modifications.
Intelligent threat filtering – Deny Lists
Deny Lists are a security tool that provides a systematically updated list of malicious domains.
It focuses on protection against phishing, malware, investment scams, and fake online stores. The data is drawn from the CSIRT.cz team's automated tools and analyses. We offer Deny lists in the form of RPZ zones or other formats for blocking domains on your DNS servers, with flexible web-based management.
Website security – Web Scanner
The web scanner helps website operators identify vulnerabilities through automated scanning and quick manual testing.
It focuses on detecting vulnerabilities from the OWASP Top 10, the most critical security risks for web applications. We offer to identify vulnerabilities on your website through scanning and provide recommendations for addressing the vulnerabilities found.
Penetration Testing
Penetration testing simulates real-world threats and uncovers vulnerabilities in your IT infrastructure before an attacker can exploit them. Enhanced protection thanks to security experts from CSIRT.CZ.
Penetration testing is used to find vulnerabilities in a customer’s IT infrastructure. It helps organizations identify and eliminate hidden threats they are often unaware of. These can include half-forgotten services that, for historical reasons, no one maintains; vulnerable web and other applications; configuration errors; the consequences of mistakes made by regular users; and many others.
Identity management – MojeID
MojeID is one of the authentication methods offered by the Citizen Identity system and is used to log in to various government and public administration portals, as well as those of commercial entities.
MojeID enables service providers to easily and securely verify users’ identities up to the “high” verification level. We offer solutions for service providers who need reliable electronic identification. MojeID allows for easy implementation and provides access to premium technical support.