Security software from Ulm, Germany. Developed and operated in house.

NxtGenIT builds NxtFireGuard, which keeps your firewall blocklists current, and Tyvar, a pentesting tool for internet-facing applications.

  • Founded 2022
  • Ulm, Germany
  • Two products

Blocklists that stay current.

NxtFireGuard scores IP addresses in real time, using what your network sees and what the rest of the community reports. When an IP crosses your threshold, it goes on your blocklist and your firewalls enforce the block automatically.

The path of an IP address through NxtFireGuard Sensors report attacking IP addresses. Every IP is scored against community and third-party threat intelligence. Traffic sensors check live connections locally and put IPs over the threshold on the blocklist. Firewalls pull the blocklist over HTTPS. Blocked IPs are re-evaluated all the time and removed once they are clean. Threat intelligence community and third party 01 Sensors firewall, IDS, honeypot, AAA server 02 Scoring every IP is scored 04 Blocklist pulled over HTTPS HTTPS Firewalls 03 Traffic sensors live connections, checked locally 05 Automatic Re-Evaluation clean, removed The path of an IP address through NxtFireGuard Sensors report attacking IP addresses. Every IP is scored against community and third-party threat intelligence. Traffic sensors check live connections locally and put IPs over the threshold on the blocklist. Firewalls pull the blocklist over HTTPS. Blocked IPs are re-evaluated all the time and removed once they are clean. 01 Sensors firewall, IDS, honeypot, AAA Threat intelligence community and third party 02 Scoring every IP is scored 03 Traffic sensors live connections, local 04 Blocklist pulled over HTTPS HTTPS Firewalls 05 Automatic Re-Evaluation
The path of an IP address. It gets reported, scored and put on the blocklist. Once it is clean, it comes off again.
dashboard.nxtfireguard.nxtgenit.de
NxtFireGuard dashboard. The overview with IP actions, traffic and threat events, and charts of blocklist changes and traffic events over time. NxtFireGuard dashboard. The overview with IP actions, traffic and threat events, and charts of blocklist changes and traffic events over time.
The overview with IP actions, traffic and threat events, and blocklist changes over time.

Real attacks. Signed rules.

Tyvar is a pentesting tool for internet-facing applications. It tests your domains, web applications and APIs and monitors your attack surface. We only start once you have signed off in writing.

Survey drawing of an external test From a fixed Source-IP, sight lines run to the systems at the edge of a plot that can be reached from outside. The inside is marked out of scope. The agreed testing window is drawn below as a dimension line. An Emergency Stop sits next to the station. internal, out of scope externally reachable systems fixed Source-IP Emergency Stop agreed testing window

How we build.

  • NxtFireGuard and Tyvar

    We run our own software.

    NxtGenIT builds NxtFireGuard and Tyvar in Ulm, Germany, and runs both itself.

  • Tyvar

    Tyvar only tests with a signature.

    Tyvar only tests with written authorization, from fixed Source-IPs, inside agreed testing windows and with an Emergency Stop.

  • NxtFireGuard

    NxtFireGuard only blocks checked addresses.

    NxtFireGuard checks every IP address before it goes on the blocklist. Once it is clean again, it comes off.

Talk to us.

We reply in English or German.