Pund-IT logoPund-IT

Anzen Family · Security Stack

Eight managed layers between you and the threat

The Anzen Family is Pund-IT's full security stack — from your internet identity to DNS, endpoints, email, people, firewall and vulnerability scanning. Every layer deployed, configured and actively managed by Pund-IT.

The stack

Eight products. One team running them. Nothing install-and-forget.

Pund-IT Built

Anzen Egress

"Your datacenter IP, delivered anywhere."

Managed outbound identity delivering fixed public IPs to any site over encrypted WireGuard tunnels — true routed IPs (single /32 to full blocks), no NAT, full identity, even behind CGNAT. Preconfigured MikroTik CPE + portal-driven provisioning.

DNSFilter

AnzenDNS

"Stop web threats before the connection happens."

DNS-layer blocking of malware, phishing, and C2 traffic before a page loads. Per-org policies, custom block pages, roaming clients, fully managed by Pund-IT.

SentinelOne

AnzenXDR

"AI-driven endpoint protection, managed end to end."

NGAV + EDR that catches ransomware, zero-days, and fileless attacks with automated rollback. Deployed via Ninja, actively monitored — never install-and-forget.

BullPhish ID

AnzenAware Training

"Turn your weakest link into your first line of defense."

Managed security awareness training + phishing simulations with M365/Google sync and audit-ready reporting. Essential for cyber-insurance renewals.

EdgeWave / GoSecure

AnzenEdge

"Clean email in, threats kept out."

Managed email security gateway — spam, phishing, and malware stopped before the inbox. M365-native, end-user quarantine digests, Pund-IT managed.

Barracuda Sentinel

AnzenSentinel

"AI armor against targeted email fraud."

AI detection of business email compromise and impersonation inside the mailbox — the fraud emails filters miss.

Barracuda

AnzenFW

"Enterprise firewall, managed as a service."

Managed Barracuda firewall — licensing, config, and monitoring handled by Pund-IT; no expired subscriptions or hardware surprises.

RoboShadow

AnzenScout

"Know your weaknesses before attackers do."

Continuous external vulnerability scanning feeding monthly Pund-IT CVE/vuln reports — built for insurance questionnaires and compliance.

Don't see your layer?

"Security is a stack, not a single product."

Tell us where your gaps are — we'll assemble the right Anzen layers around them, sized to your risk and budget.

Start the conversation

Spotlight: Anzen Egress tiers

The layer Pund-IT built itself — pick the shape that fits your site.

Client

Single static IP

  • Fixed datacenter public IP
  • Managed CPE, full-tunnel mode
  • Preconfigured — plug in and it's on
Fits: remote workers & home offices behind dynamic IPs or CGNAT
Business

Static IP + policy routing

  • Static public IP with policy routing options
  • Route selected systems via the trusted identity
  • SLA options available
Fits: offices with vendor portals, banking or IP-locked SaaS
Block

Routed /29 or larger

  • Routed public block delivered to your site
  • Multiple services, each with its own stable address
  • Room for servers and self-hosted workloads
Fits: multi-service environments, servers and self-hosted workloads
Optional add-ons HA Priority Telemetry IPv6 Ready

Anzen keeps attackers out.
Kopi makes sure you bounce back.

The security stack and the backup stack — better together. Meet the Kopi Family →

Build your stack

Tell us where your gaps are — we'll map the Anzen layers that close them, sized to your risk and budget.