Free 30-min audit Discuss 0
Israel · Karmiel · Countrywide remote & on-site

HERMES

TECHNOLOGIES
Enterprise IT for businesses that cannot afford downtime.

Most companies wait until their network throws errors for six months before calling someone. We're the team you call before that, or the team you call when it's already on fire. Either way, we show up with a plan, not a sales deck.

0
Years experience
0
Users supported
0
Vendor partners
0
Quote turnaround
Try it yourself

Talk to us in terminal.

For tech folks who think in commands. Type help to see what's available. Use ↑↓ for history, Tab to autocomplete.

hermes ~ /infrastructure
connected
Welcome to Hermes Technologies CLI v1.0
Type help to see what you can do.
 
hermes@karmiel ~ $
What we do

Seven areas, done properly.

Each area has a defined scope, deliverables you can read without a guide, and a clear engagement model. Pick one or combine. Most clients start with the audit and figure it out from there.

01

Network design & rollout

Most networks weren't designed — they grew. Patches on patches. We come in with fresh eyes, redo it properly, document it, and train your IT lead so you don't need us forever.

  • Greenfield LAN, SD-WAN, multi-site WiFi
  • Identity-driven access (Cisco ISE, Aruba ClearPass)
  • HLD/LLD diagrams + 30-day post-rollout support
Discuss →
02

Cybersecurity & compliance

The boring layers that keep ransomware out and auditors happy. We set them up correctly the first time, then keep them updated. ISO 27001 readiness in 90 days, not 9 months.

  • Posture assessment + gap analysis
  • EDR/XDR rollout, WAF, Zero Trust identity
  • ISO 27001 evidence pack ready for auditor
Discuss →
03

Cloud architecture & migrations

Most companies don't need to be 100% in the cloud. We help you decide what should move, what should stay, and we move it without breaking everything else. AWS, GCP, hybrid — we don't push religions.

  • Workload assessment + landing zones
  • Lift-and-shift or refactor (we'll tell you which)
  • FinOps cost model so the bill stops surprising you
Discuss →
05

Hardware & licensing

You tell us what you need, we figure out the right brand, source it from 24+ partners, ship it pre-imaged, install it. One PO instead of five. One number to call when warranty kicks in.

  • Servers, network, security appliances, endpoints
  • Pre-imaged endpoints shipped to door
  • Hardware-as-a-Service available (lease, no CapEx)
Discuss →
06

Managed operations

For when you don't want to think about IT. We monitor, patch, escalate to vendors, pick up the phone, quietly keep things running. Same senior engineer every month — not a different L1 tech each ticket.

  • 24/7 monitoring (Zabbix, Grafana, ThousandEyes)
  • Patch management + ticket SLA
  • Quarterly business review with real numbers
Discuss →
07

24/7 incident response

Active ransomware. Confirmed breach. Production server that won't come back. You call. A senior engineer is engaged within four hours, with multi-vendor escalation authority and the experience to know what's worth fighting for.

  • Ransomware containment + recovery
  • Forensics + hardened rebuild post-incident
  • Vendor TAC escalation (we know the names)
Discuss →
Industries

Built for organisations
where IT actually matters.

Multi-disciplinary depth means we serve regulated and complex environments — not just startups looking for laptops. Each vertical has its own pain. We've seen most of them.

+

Healthcare

HIPAA-class data, secure clinic-to-HQ links, telephony integration that doesn't drop calls when an ambulance is on the line.

$

Fintech & Banking

High-uptime SLAs, audit cycles you can predict, ISO 27001 and SOC 2 readiness, hardened identity stack.

Retail & Multi-site

Branch SD-WAN that doesn't cost a fortune, POS integration, contact centers, peak-season scaling without panic.

Manufacturing

OT/IT segmentation, plant-floor connectivity, multi-site networking, secure remote access for vendors and engineers.

Government & Defense

Sivug-cleared engagements with the discipline that regulated sectors require. Documentation that survives audits.

Contact Centers

UCCE, UCCX, Asterisk, Kamailio — from five seats to five hundred. A rare specialty in Israel. We've designed national deployments.

Live status

Always on.

A snapshot of how we operate. Real metrics, refreshed in real time. Like a Grafana dashboard, but yours.

Uptime SLA
99.99%
↑ contractual
Avg response
47ms
↑ <4h emergency
Threats blocked
1,247
↑ this week
Active monitors
24/7
↑ across stack
network throughput · last 60sLIVE
Selected outcomes

Real numbers.
Real ownership.

Not pitch slides. Not marketing fluff. Snapshots of what enterprise-scale execution actually looks like, drawn from 10+ years leading IT for organisations that operate around the clock.

National network · 2016–2025
12 → 24

Doubled national network capacity

End-to-end design and rollout of the Cisco SD-Access fabric across 24 sites, identity-driven access, Nexus/UCS data centre. 24/7 SLA for 2,000+ users with zero unplanned major outages.

Security posture · CISO functions
ISO 27001

Compliance led end-to-end

Spearheaded the security posture for a global enterprise: SentinelOne EDR rollout, Cloudflare WAF, mail-relay hardening, audit-ready documentation. Auditor signed off without findings.

Cloud FinOps · Global enterprise
FinOps

Significant cloud-cost reductions

AWS & GCP architecture review combined with Zabbix and Grafana telemetry. Surfaced waste, right-sized compute and storage, set up disciplined FinOps cadence with executive leadership.

Why us

Three things no one else combines.

01

End-to-end ownership

The same senior engineer who designs the system runs it on day one and picks up the phone when something breaks at 3 a.m. No handoffs. No "let me check with my team."

02

Vendor-neutral by design

Authorized partner with 24+ vendors and zero exclusivity deals. The recommendation matches your requirement, not the highest rebate. We'll tell you when something cheaper actually does the job.

03

Quote within 24 hours

Send your spec or just describe the situation. You get a clean PDF quote with line-item pricing within one business day. Guaranteed in writing. No SDR follow-ups.

How we work

Short discovery.
Disciplined execution.

No vendor agendas. No padded retainers. Fixed scope or honest hourly — your choice. Either way, you know what you're paying for and when it's done.

1

Discovery call

Free 30-minute call. Map the situation, identify what to fix first, decide if we're a fit. Zero obligation.

2

Scope & quote

Within 5 business days: one-page scope, fixed price, delivery timeline. You sign or you walk.

3

Execution

Senior engineer named on the engagement. Weekly progress notes. HLD/LLD docs delivered before sign-off.

4

Operate or hand off

Optional retainer for managed services, hotline, vCIO. Or full handoff with runbooks. Your call.

Common questions

Honest answers before the call.

Things IT teams actually ask in the first 15 minutes. Here's the straight version, without the marketing layer.

For discovery — same week. For projects with a defined scope, kick-off typically within 5–10 business days. Active emergencies — within 4 hours of the phone call.
Yes. Architecture, vCIO, security, and cloud delivered remotely nationwide. On-site work direct in north Israel; for centre/south, we partner with vetted local engineers under our supervision and SLA. Same accountability, same documentation.
Smallest: a single Security Sprint (30 days) or a one-vendor POC (2 weeks). Largest: full IT operations for organisations of 50–500 employees. Most engagements run 1–6 months with optional ongoing retainer.
No exclusivity deals. Authorized partner with 24+ brands across network, security, cloud, storage, and endpoints. Recommendations match the requirement, not the rebate. We'll happily recommend Mikrotik over Cisco when it's the right call.
Yes. Hotline retainer clients: senior engineer engaged within 1 hour, on-site within 4 hours (north Israel). Non-retainer emergencies: best-effort within 4 hours, billed at emergency rate. We don't pad bills with junior techs.
Both. Most projects are fixed-price with defined scope — we eat the risk if it takes longer. Operations are monthly retainer. Capped hourly available for short ad-hoc work where scope is genuinely unclear.
Of course. Send yours or we'll send a standard mutual NDA — signed within a day. Sivug-cleared work has additional confidentiality protocols beyond standard NDA.
That's the design. A typical journey: Security Sprint (30 days) → Network Audit → vCIO retainer (4 h/mo) → ongoing managed ops. Each stage independent, no lock-in. Cancel any quarter, no penalty.
R
Hi, I'm Roman.

I built Hermes Technologies because I got tired of how most IT shops treat clients.

For more than ten years I've led IT infrastructure for organisations that operate around the clock. I've seen how big integrators sell hours instead of solutions, how exclusive partners push gear that doesn't always fit, and how IT managers get left with documentation they can't read.

Hermes is the team I'd want to hire if I were on your side of the phone. We come with a plan, not a pitch deck. We stick around after install. We pick up the phone.

— Roman Kopitiuk
Founder · 10+ years · Karmiel

Free 30-minute IT audit.

Honest assessment of where you are, what to fix first, and what it'll cost. No commitment, no pitch, no "let me schedule a follow-up call to discuss your needs."

Schedule the call
Get in touch

Tell us where it hurts.

Live activity LIVE
2mAudit scheduled · Tel Aviv
14mNetwork design review · Haifa
38mPOC quote sent · Kfar Saba
1hISO sprint kicked off · Karmiel
2hVendor evaluation · Jerusalem
By the numbers
10+
Years experience
24/7
Response
<24h
First reply
100%
Israel coverage
What you get
A real engineer reads your message
No SDR, no chatbot, no follow-up spam
Reply within 1 business day
Free 30-min audit, no commitment

Direct line.

No call-centre, no SDR, no chatbot. You speak with a real engineer who reads your message and replies the same day.

Free 30-min audit.

Send the form and we'll reply within 1 business day. No newsletters, no chatbots — a real engineer reads every message.

No newsletters · No SDR follow-ups · Just a real reply
Or write us directly: romank@hermestech.pro