# Werk IT Solutions

> Werk IT Solutions, Lda. provides IT support for businesses (managed service provider, MSP): it looks after the IT of small and medium-sized businesses in Greater Lisbon, Portugal, since 2010. Certified Microsoft partner and certified 3CX partner. One small team handles day-to-day IT (helpdesk, Microsoft 365, servers, network, backups with tested restores) and, on that foundation, cybersecurity and business continuity, NIS2 support, AI strategy and private AI, 3CX telephony with AI, and post-quantum cryptography readiness for those who need it. One-off support and repair is also available, with indicative public prices. Service in Portuguese and English. The first meeting is free. No lock-in.

This file summarises the website www.werk.pt for AI assistants. Everything here is taken from the site itself. The canonical language of the site is Portuguese (Portugal); an English version exists for every page.

## Company facts

- Legal name: Werk IT Solutions, Lda.
- NIPC / VAT: 509275346 (VAT PT509275346)
- Working since: 2010, providing IT support for small and mid-size companies
- Partnerships: certified Microsoft partner; certified 3CX partner
- Team: a small team. You always speak to the same people. No call centre and no different technician every time; whoever answers already knows your company.
- Languages: Portuguese and English. Write in either and Werk replies in the same language.
- Typical clients: SMEs in Greater Lisbon, especially professional services, law firms and other businesses where confidentiality and continuity are not optional, including work where AI must run privately on the company's own documents.
- Positioning: "We are not the cheapest, but we answer when you call and we test the backups." Werk also tells clients what not to do (not to buy a tool, not to migrate yet, not to put a document into a chatbot).

## Contact

- Phone: +351 211 570 970
- Email: werk@werk.pt
- Address: Bela Vista Office, Estrada Paço Arcos, 66, 2735-336 Sintra, Portugal
- Hours: Monday to Friday, 09:00–18:00 (Europe/Lisbon)
- Contact methods: phone or email (there is no contact form). Phone if it is urgent; email to leave context.
- Contact page: [EN](https://www.werk.pt/en/contacto.html) · [PT](https://www.werk.pt/pt/contacto.html)

## Service area

- On site across Greater Lisbon: Lisbon, Sintra, Oeiras, Cascais and Amadora.
- Remote support across the rest of Portugal.
- Equipment repair nationwide: collection and return by CTT anywhere in Portugal.
- Post-quantum readiness work is done from Greater Lisbon for companies across the country.

## Reviews

- 4.4/5 from 9 reviews on Zaask: https://www.zaask.pt/user/werkit

## How engagement works

1. First meeting (free, no commitment, no jargon): Werk listens to what is going wrong or what worries you and says frankly whether it can help. If it is not the right team, it says so.
2. Assessment: devices, accounts, network, backups, licences, contracts and risks are surveyed and written down, including what is fine.
3. Plan: priorities in plain language (what to fix now, what can wait, what is not worth doing).
4. Written proposal: what is included, what is not, and the terms. No lock-in.
5. Implementation with minimal disruption, out of hours when needed, documented throughout.
6. Ongoing support: helpdesk, maintenance, periodic reviews and a contact person who knows the company.

Useful to have ready for the first meeting: number of people, computers and locations; what you use (Microsoft 365, own servers, management or invoicing software); who handles IT, phones and backups today; what is going wrong. For 3CX: current phone system, numbers, operator and how many people answer calls. For AI: tools the team already uses and what documents you would like to search. For post-quantum: sector, internet-facing systems, long-lived confidential data, and whether customers or regulators have asked.

## Pricing

- Ongoing IT (helpdesk, maintenance, backups, Microsoft 365): a monthly fee per user or per device, set after the assessment. No public price list for this.
- One-off projects (migrations, new office, inventories, PQC, private AI): quoted separately, as a fixed fee or by time, as set out in the proposal.
- Usually included in ongoing support: helpdesk for the team; maintenance of workstations, accounts and network; backups with tested restores (agreed scope); day-to-day Microsoft 365 if Werk looks after it; a contact who knows the company.
- Usually excluded unless agreed: hardware and third-party software licences; large projects; work outside agreed hours if not covered; major incident response beyond the contracted plan.
- No lock-in (no minimum term).
- One-off support and repair has indicative public prices: see "Support and repair" below.

## Service: IT support for businesses (MSP)

Pages: [EN](https://www.werk.pt/en/msp.html) · [PT](https://www.werk.pt/pt/msp.html)

The centre of what Werk does; the other areas are built on it. For small and mid-size companies whose IT lives "in one person's head, with a supplier who doesn't answer, and on a sheet of passwords", and for companies that already have an in-house IT person (Werk covers holidays, adds depth in servers, networking, Microsoft 365 and security, and takes repetitive work off their plate rather than replacing them).

What is included:
- Helpdesk that answers and solves: one number and one address for everyone; every request logged with an owner and followed to the end. Mostly remote (on the employee's screen, with permission); on site when needed.
- Microsoft 365 set up and secured: email and domain (mailboxes, shared mailboxes, SPF, DKIM, DMARC), Teams (channels, meetings, optional calling), SharePoint and OneDrive (where files live, who sees them, external sharing), the right licence per person, security (MFA, conditional access, phishing protection, sharing rules), and Microsoft 365 backup. Technical: Entra ID, Intune, Defender for Office 365, retention and sensitivity labels, depending on licences.
- Servers: physical, virtual or cloud; installation, updates, monitoring, planned replacement. Windows Server, Active Directory, virtualisation, NAS, hybrid with Azure where it makes sense.
- Network and Wi-Fi: router, firewall, switches, access points, VPN; guest network and separate network for devices such as cameras, printers and TVs. VLAN segmentation, documented firewall rules, VPN with MFA, Wi-Fi survey, link monitoring.
- Backups with tested restores: more than one place, at least one copy an attacker cannot delete, regular restore tests (3-2-1 with offline or immutable copy, RPO/RTO agreed with management).
- Computers and phones: company laptops, desktops, phones and tablets prepared, updated, protected and inventoried (device management with Intune or equivalent, disk encryption, managed antivirus/EDR).
- Security basics: MFA everywhere, timely updates, fewer admin rights, email filtering, short phishing training.
- People joining and leaving: same checklist every time; access cut on the last day, data stays with the company.
- Vendor management: telecoms operator, invoicing software, printer company, networked alarm; Werk follows requests to the end.
- Office moves and new sites: lines, network, Wi-Fi and equipment planned so everything works on Monday morning.
- Monitoring to catch problems early (failing disk, backup that didn't run, certificate about to expire).
- Documentation that stays with the client: inventory, network diagrams, procedures, admin credentials in a vault, record of restore tests. If the client changes provider, it goes with them.
- Periodic reviews with management (licences, warranties, end-of-life equipment, priorities).

Switching provider: survey, collection of access and documentation, handover with the previous provider. Out-of-hours handling of serious problems is agreed in writing in the first meeting. Pricing: monthly fee per user or device after assessment; written proposal; no lock-in.

## Service: Cybersecurity and business continuity

Pages: [EN](https://www.werk.pt/en/seguranca.html) · [PT](https://www.werk.pt/pt/seguranca.html)

For SMEs that want to know how long they would be down after an attack (such as ransomware) and how to get back to work. No company can guarantee it will never be attacked; Werk prepares the recovery decision in advance. No scare tactics.

Before an incident: inventory of devices, accounts, applications, data and suppliers with dependencies; backups an attacker can't delete (at least one offline or immutable copy, backup credentials separate from the domain, timed restore tests, RPO/RTO per system); MFA on email, VPN, remote access, administration and cloud; patching with a schedule and record, internet-facing systems first; least privilege (separate admin accounts, LAPS, conditional access); a short written incident response plan; a contact list outside company systems (Werk, insurer, lawyer, bank, operator, critical suppliers, CERT.PT); tabletop exercises with management.

During and after: detect and confirm, contain (isolate without wiping evidence), communicate (insurer, authorities where applicable, customers, partners), recover in a pre-decided order (identities and network first, then invoicing and customer-facing systems), learn and close the gap.

Deliverables: asset and dependency inventory; backups with an immutable/offline copy and restore record; incident response plan; external contact list; tabletop exercise; recovery order by system. Werk also helps answer cyber-insurance questionnaires truthfully and close gaps. Free downloadable checklist (PDF): "the day after ransomware".

If you suspect an attack right now: disconnect the affected machine from the network (cable and Wi-Fi), do not wipe or reinstall it, do not shut down servers in a hurry, and call +351 211 570 970.

Engagement: free first meeting, assessment, written proposal, no lock-in.

## Service: NIS2

Pages: [EN](https://www.werk.pt/en/nis2.html) · [PT](https://www.werk.pt/pt/nis2.html)

For SMEs that receive cybersecurity questionnaires from larger customers. NIS2 (Directive (EU) 2022/2555) mainly binds larger entities; in Portugal it was transposed by Decree-Law no. 125/2025 (Regime Jurídico da Cibersegurança), in force since 3 April 2026, covering 17 sectors and public administration. Many SMEs feel it through the supply chain.

How Werk helps: reads the customer's questionnaire and maps it to concrete controls (what you have, what is missing, what does not apply); closes the basics almost everyone asks for (MFA, backups with tested restore, asset inventory, leavers' accounts, updates, short incident response plan); documents written answers that match what is actually installed. Werk does not promise "NIS2 certified" and does not replace legal advice on whether a company is in scope; it prepares the technical and documentary side. Engagement: free first meeting (bring the questionnaire), then a proposal; no lock-in.

## Service: Artificial intelligence (AI strategy and private AI)

Pages: [EN](https://www.werk.pt/en/ia.html) · [PT](https://www.werk.pt/pt/ia.html)

For companies whose staff already use AI, often with personal accounts and company data, and for firms whose documents must not leave the office (law firms, clinics, accounting firms, engineering teams with intellectual property).

What Werk does:
- AI strategy: starts from the work, not the technology; a short plan with two or three use cases with clear return, in order, and what stays out and why. Covers data classification, enterprise cloud vs local execution, privacy/GDPR, EU AI Act where applicable, pilot success criteria.
- AI usage policy: two or three pages people actually read (approved tools and accounts, data that never goes in, checking results, whom to ask), a short team session, and Microsoft 365 settings that enforce it (sensitivity labels, DLP, blocking or warnings on unapproved services). Free checklist (PDF): acceptable use of AI.
- Internal assistants for specific tasks (internal procedures, first drafts of proposals, meeting and case-file summaries, request triage), connected to the right sources with permissions.
- Private AI with local models: an AI system on hardware inside the company (NVIDIA DGX Spark); Werk chooses the model for the task and language, installs it, connects it to documents, configures sign-in (Entra ID), permissions inherited from folders, logs and backups, and keeps it updated. Documents do not go to anyone's cloud and are not used to train the model.
- Search over your own documents (RAG) with cited sources and permission filtering.
- It rests on the IT department: identities, permissions and organised data.

Werk also says when private hardware is not needed (an enterprise cloud tool may be simpler if data isn't confidential). ChatGPT or Copilot can be used with business versions, proper configuration and a policy. Engagement: free first meeting and survey; often the first outcome is a policy and Microsoft 365 settings before anything is bought; no lock-in.

## Service: 3CX phone systems with AI

Pages: [EN](https://www.werk.pt/en/3cx.html) · [PT](https://www.werk.pt/pt/3cx.html)

Werk is a certified 3CX partner. For companies whose phone system "doesn't talk to anything", with missed calls, old systems only one technician can touch, or vendors blaming each other.

What is included: setup and configuration (on your server or in the cloud; numbers, opening hours, queues, auto-attendant, call recording, desk phones and computer/mobile apps); migrations from analogue or other VoIP systems with number portability and a planned cutover; support on the same helpdesk that runs the network (QoS, voice VLAN, SIP trunks, firewall/NAT, call-quality monitoring); Microsoft 365 and Teams integration (users, contacts, presence, calling with the company number from Teams); CRM integration (customer record opens on ring, click-to-dial, calls logged with summary); 3CX's own AI features (transcription, call summaries, sentiment analysis, AI answering/virtual receptionist, on-premises processing with 3CX AI Server; availability depends on edition and version); smart routing; privacy and recording policy (notice, retention, access, transcription provider).

Werk can take over 3CX support from another supplier without interrupting service. Numbers can usually be kept through portability. Many existing IP phones are compatible (checked model by model). Engagement: free first meeting, written proposal, no lock-in.

## Service: Post-quantum cryptography readiness (for those who need it)

Pages: [EN](https://www.werk.pt/en/pqc.html) · [PT](https://www.werk.pt/pt/pqc.html)

A differentiator, not the lead service: for organisations that hold data which must stay confidential for many years, or whose customers, regulators or audits are starting to ask. Everything is delivered in writing, in one version for management and another for the technical team. Context: NIST published the first post-quantum standards in August 2024; the EU coordinated roadmap (June 2025) asks Member States to start the transition by end of 2026 and protect high-risk cases by end of 2030; "harvest now, decrypt later" means data copied today can be read later.

Werk's method (in this order): 1) cryptographic inventory (CBOM): certificates, VPNs, SSH, email, signed code and documents, backups, databases, applications with their own libraries, devices and firmware, third-party links; 2) priorities by data lifetime and exposure; 3) migration plan per asset: ML-KEM (FIPS 203) for key establishment, ML-DSA (FIPS 204) for signatures, SLH-DSA (FIPS 205) or LMS/XMSS (NIST SP 800-208) where justified, "await vendor" when not under your control; 4) hybrid mode testing (e.g. X25519MLKEM768 in TLS 1.3, mlkem768x25519-sha256 in SSH) before production; 5) vendor follow-up in writing, plus post-quantum and crypto-agility requirements for new purchases.

Deliverables: CBOM with owners; priority map; phased migration plan; hybrid test results; record of vendor answers; purchasing requirements; two-page executive summary without acronyms. Free checklist (PDF): post-quantum readiness. Engagement: free first meeting about your inventory, then a quoted project; no lock-in.

Is there anyone in Portugal who does this work? Yes. Werk IT Solutions, based in Greater Lisbon, prepares companies across Portugal for post-quantum cryptography, from inventory to migration.

## Service: Support and repair (one-off)

Pages: [EN](https://www.werk.pt/en/suporte-reparacao.html) · [PT](https://www.werk.pt/pt/suporte-reparacao.html)

For small offices that don't need a contracted IT department but need someone who answers and fixes things. Same people who have looked after company IT since 2010.

What is included: on-site support for PCs, printers and networks in small offices (Lisbon, Sintra, Oeiras, Cascais, Amadora); diagnosis at Werk's office (bring the equipment or send it by CTT; you are told what is wrong before any repair goes ahead); CTT collection and return anywhere in Portugal; Microsoft 365 Business Basic accounts on the company's own domain; email setup on the computers of the people who use it.

Indicative prices, + VAT (IVA):
- On-site support: €45/hour, one-hour minimum
- Diagnosis at our office: €45/h, usually 1–2 hours; credited against the repair if it goes ahead
- CTT collection and return: €10 each way
- Microsoft 365 Business Basic: €78 per account per year
- Email setup: €100 for up to 4 accounts, plus €20 per extra account

A repair cannot be guaranteed until the equipment has been checked. To book: call +351 211 570 970 or email werk@werk.pt, Monday to Friday 09:00–18:00, saying what the equipment is and what is happening. Rating: 4.4/5 from 9 reviews on Zaask.

## Pages by language

- Portuguese (default): [Home](https://www.werk.pt/), [Assistência informática a empresas](https://www.werk.pt/pt/msp.html), [Security](https://www.werk.pt/pt/seguranca.html), [NIS2](https://www.werk.pt/pt/nis2.html), [AI](https://www.werk.pt/pt/ia.html), [3CX](https://www.werk.pt/pt/3cx.html), [Post-quantum](https://www.werk.pt/pt/pqc.html), [Suporte e Reparação](https://www.werk.pt/pt/suporte-reparacao.html), [Contact](https://www.werk.pt/pt/contacto.html), [Articles](https://www.werk.pt/pt/blog/)
- English: [Home](https://www.werk.pt/en/), [IT support for businesses](https://www.werk.pt/en/msp.html), [Security](https://www.werk.pt/en/seguranca.html), [NIS2](https://www.werk.pt/en/nis2.html), [AI](https://www.werk.pt/en/ia.html), [3CX](https://www.werk.pt/en/3cx.html), [Post-quantum](https://www.werk.pt/en/pqc.html), [Support and repair](https://www.werk.pt/en/suporte-reparacao.html), [Contact](https://www.werk.pt/en/contacto.html), [Articles](https://www.werk.pt/en/blog/)

## Optional

- [Articles (EN)](https://www.werk.pt/en/blog/): cryptographic inventory, harvest now decrypt later, AI policy, the day after ransomware
- [How this site is made](https://www.werk.pt/en/como-este-site.html)
- [Sitemap](https://www.werk.pt/sitemap.xml)