IT and security for small businesses in Maine and New England

Secure networks, practical AI, and systems that keep running.

Pinetech Infrastructure Solutions protects your network, takes the busywork off your team with AI, and builds cloud systems you can rely on. Fixed-price projects and monthly support, from one senior engineer, first call to handoff.

Free and no obligation. You leave with a short list of what to fix first.

Who I work with

Built for businesses without a full IT department.

And for lean IT teams that need a senior engineer for one project, or a second pair of hands every month.

  • Professional offices

    Law, accounting, insurance, and real estate offices that need client data protected and staff able to work from anywhere.

  • Healthcare and dental practices

    Practices that need patient data locked down, access logged, and answers ready for a HIPAA risk assessment.

  • Manufacturers and trades

    Shops and job sites with machines, cameras, and office computers on one network that should be three.

  • Lean IT and software teams

    Teams that need infrastructure as code, a deploy pipeline, or AI automation built by someone who runs it in production.

Why it matters

Most IT problems stay invisible until the day they stop the business.

You do not need to know the technical side. Here is what actually goes wrong at small businesses, how often, and what I do about it.

  • Ransomware

    One click can lock every file.

    Ransomware is software that locks your files until you pay. It usually gets in through a fake email or a device that missed its updates, and it can close an office for days.

    88% of breaches at small and midsize businesses involved ransomware, compared with 39% at large companies.

    What I doUpdates on a schedule, a firewall that keeps staff, guest, and device networks apart, and backups ransomware cannot reach.

    Source: Verizon 2025 Data Breach Investigations Report, small business snapshot

  • Email fraud

    A fake invoice from an email you trust.

    A criminal takes over or imitates an email account, then asks your team to pay an invoice or change bank details. No virus is needed, just one convincing message.

    $3 billion lost across 24,768 reports to the FBI in 2025, about $123,000 per report.

    What I doA code or app approval on every sign-in, email records that make your domain hard to fake (SPF, DKIM, and DMARC), and a call-back rule for payment changes.

    Source: FBI 2025 Internet Crime Report, business email compromise

  • Backups

    Backups that fail the day you need them.

    Many backups report success while missing files, or sit on the same network the ransomware locks. Most owners find out during the emergency.

    $115,000 was the median ransom paid in Verizon's 2025 report. A backup that restores is how you avoid paying it.

    What I doCopies kept off site and out of reach, plus a restore test on a schedule, with the result shown to you.

    Source: Verizon 2025 Data Breach Investigations Report, median ransom paid

  • Access

    Old accounts and vendors who still have the keys.

    Former employees, shared passwords, and vendor logins that never get turned off are open doors that nobody is watching.

    30% of breaches involved a vendor or other third party, double the previous report.

    What I doAn access review, one login per person, and accounts turned off the day someone leaves.

    Source: Verizon 2025 Data Breach Investigations Report

A breach also comes with legal duties.

If a breach exposes customers' personal information, such as Social Security or account numbers, Maine law requires you to notify them within 30 days of learning about it and to report it to the state. Cyber insurance applications often ask whether you use sign-in codes and tested backups.

Source: Maine Revised Statutes, Title 10, section 1348

Let's get you fixed up. Most of these are quick to fix once someone looks.

Services

Four services, one point of contact.

The network, the AI that runs on it, and the systems that keep it all running. Scoped together, so nothing falls between vendors.

Network and security

Know your network is locked down, and be able to prove it.

  • Separate networks for staff, guests, and IoT devices
  • Remote access without open ports or shared passwords
  • Answers for cyber insurance and customer security questionnaires
Fixed-scope project

AI and automation

Put AI to work on the busywork, without handing over your data.

  • Ticket and inbox triage with drafted replies
  • Answers from your own documents, with sources cited
  • A person approves anything that changes a system
Pilot first

Cloud and DevOps

Releases that ship safely, on infrastructure you can rebuild.

  • Servers, networks, and cloud accounts defined in code
  • Pipelines with tests and security gates on every change
  • Monitoring and alerts that reach the right person
Fixed-scope project

Managed IT

Ongoing care from a named engineer who answers.

  • Patching and monitoring on a schedule
  • Backups that get restore-tested, with the results shared
  • Hardware, license, and account tracking
Monthly plan

Also available

Business websites. A fast, secure rebuild of your site that works on phones, built the same way as this one. From $750. Hosting and edits are part of Managed IT.

Also available

Private fiber. Fusion splicing, OTDR and power meter testing, and as-built records for buildings, campuses, and private networks, done by a certified fiber optic technician.

Pricing

Ways to get started.

Each package has a clear deliverable and a starting price. Your written scope sets one fixed price before any work starts.

Security assessment

For offices that want to know where they stand.

From$4,000Fixed fee

Typical length: 2 weeks

  • Network and firewall review
  • Account and access review
  • Backup restore test
  • Written report with prioritized fixes
  • One hour walkthrough
Book a free call

AI pilot

For teams with one workflow that eats hours every week.

From$4,750Fixed fee

Typical length: 2 to 4 weeks

  • One workflow, picked together
  • Private model, so your data stays yours
  • Approval steps and full logging
  • Time saved, measured and reported
  • A build-out plan if it pays off
Book a free call

Cloud and pipeline setup

For teams shipping software or running cloud servers by hand.

From$7,600Fixed fee

Typical length: 3 to 6 weeks

  • One environment defined in code
  • CI/CD with tests, scans, and a deploy gate
  • Monitoring and alerts
  • README and a handoff session
Book a free call

Managed IT

For small offices without an IT person.

From$95Per user, per month

Billed: monthly

  • Patching and monitoring
  • Backups with restore tests
  • Hardware, license, and account tracking
  • Help by email from a named engineer
  • Hosting and edits for a website we built
  • Quarterly review
Book a free call

Starting prices are for a typical small office. Larger or multi-site environments are quoted after the discovery call.

How it works

How an engagement runs.

You know what comes next and what it costs before any work starts.

  1. Discovery call

    Thirty minutes, free

    We talk through the problem and decide together whether I am the right fit.

  2. Assessment

    The real environment

    I look at the network, servers, accounts, and backups as they are today.

  3. Written scope

    One fixed price

    A plain document that says what I will do, what you get, and what it costs.

  4. Build or run

    Status you can read

    Work happens with change records, and progress shows in your client portal.

  5. Handoff

    Yours to keep

    Documentation, credentials, and configs go to you, with a walkthrough.

Security in practice

How I work inside your systems.

Access to your network is a trust, not a convenience.

  • Least privilege

    I ask for the access the job needs and remove it when the job ends.

  • Changes on the record

    Every change is written down before and after, and you get the record.

  • Backups that restore

    A green dashboard is not proof. I restore from backup in a test and show you the result.

  • You own it all

    Documentation, configs, and credentials belong to you. Nothing I build is held back.

This site follows the same rules. A+ from Qualys SSL Labs (opens a new tab) and Mozilla Observatory (opens a new tab), HTTPS required everywhere, and strict security headers. Each link runs a fresh check. Want to know how your own systems hold up? That is what the security assessment is for.

David Osisek, founder of Pinetech Infrastructure Solutions
David Osisek, MSFounder and lead engineer

About

One engineer, from first call to handoff.

Pinetech Infrastructure Solutions is David Osisek, a senior DevOps engineer and US Army veteran based in Maine.

David builds and runs production cloud platforms, network automation, and security tooling for a living. He holds a master's degree in IT security and has worked on networks from the physical layer up.

The engineer on your discovery call is the engineer who does the work. Designs get written down, changes get recorded, and the runbook comes from someone who has done the task it describes.

  • DegreeMS, IT Security
  • DegreeBS, Software Development and Analysis
  • CertifiedGoogle Cybersecurity Certificate
  • CertifiedFiber Optic Technician (CFOT), plus 3 FOA endorsements
  • ServiceUS Army veteran
  • AuthorPublished technical author

Questions

Before you book.

Not covered here? Email hello@pinetechsolutions.com.

Do I need this if nothing has gone wrong?

That is the best time to check. The problems above give no warning: a backup that will not restore, an account nobody turned off, or an update that never installed. The free call tells you where you stand before something forces the question.

What happens on the discovery call?

It is free. Thirty minutes on what you are running and what is getting in the way. If I am a fit, you get a written scope with a fixed price afterward. If I am not, I will say so.

Do I own what you build?

Yes. Documentation, configs, code, and credentials are yours. Everything lives in your accounts and repositories, and you get a walkthrough at handoff.

How do you handle our passwords and access?

I ask for the least access the job needs, share credentials through your password manager instead of email, and remove my access when the work ends. Never send passwords through the contact form.

Can you work alongside our current IT person or provider?

Yes. Many projects are a second pair of hands for a lean IT team, or a specific project your current provider does not cover.

Will AI tools see our data?

Only what the pilot needs. Models run on your hardware or in a private cloud tenant, and your data is not used to train public models.

What size businesses do you work with?

Mostly offices from a few people up to about 250, plus small IT and software teams. Larger environments are welcome for a specific project.

Contact

Tell me what you are running.

Describe the project or the problem. On the next screen you can pick a time for a free thirty minute discovery call. I read every request and reply by email.

  • A reply from the engineer, not a sales team
  • A written scope and fixed price after the call
  • No passwords or keys needed to get started

Prefer email? hello@pinetechsolutions.com

What do you need help with? Choose all that apply.
A few sentences is enough. Never include passwords or keys.

I use what you send only to answer your request. See the privacy notice and terms of use.