Case study · Support & Evolution of a portal · Long-term partnership

BashRTS LLC 8 cities Key regional operator

BashRTS —
we evolve and secure it

Strategic support New functionality Federal-grade security Incident response Regular audits

We didn't build BashRTS LLC's portal — we act as a strategic partner for its support and evolution. Targeted new functionality (such as a hot water shutdown schedule for the republic), strengthening security to meet federal standards, regular monitoring, and fast incident response.

Case: hot water schedule → Portal security

Infrastructure diagram

8 cities connected

Heat energy circuit

online

cities served

1 786

km of heat networks

100%

website coverage

Client

BashRTS LLC · one of the largest heat energy operators in the Republic of Bashkortostan

cities in the republic

1 786

km of heat networks

boiler houses

357

DHS & pumping stations

Our role in the project

We're not the site's developers —
we're a growth and security partner

The bashrts-rb.ru site was built earlier by another team. We joined as a long-term technology partner — we develop new functionality, keep the site running stably, and bring its security up to federal standards.

What we do

Only evolution and security. We don't redesign the storefront

Our scope is clearly defined: targeted new functionality on the client's request, strengthening the web infrastructure's security, audits, and fast incident response. The core storefront, branding, and site architecture are not our responsibility.

This format lets the client get targeted improvements without the risk of a full site overhaul, while we focus on what we do best.

New functionality on the client's request

Targeted modules: hot water schedule, calculators, contact forms.

Security to federal standards

Compliance with 152-FZ and industry web security standards.

Monitoring and response

Round-the-clock monitoring, fast reaction to incidents.

Site storefront development

That's the responsibility of the original contractor.

24/ 7

monitoring of portal uptime and security

no days off · all year

cities of Bashkortostan in the hot water schedule

Ufa · Sterlitamak · Salavat +5

100%

compliance with federal security standards

152-FZ · industry standards

99.9%

target SLA for portal uptime

peak season load

Ufa ✦

Sterlitamak ✦

Salavat ✦

Ishimbay ✦

Sibay ✦

Neftekamsk ✦

Blagoveshchensk ✦

Agidel ✦

Ufa ✦

Sterlitamak ✦

Salavat ✦

Ishimbay ✦

Sibay ✦

Neftekamsk ✦

Blagoveshchensk ✦

Agidel ✦

Two work tracks

Feature development
and infrastructure security

The work is split into two parallel tracks. The first — product development: new modules that matter to residents of the republic. The second — strengthening security and bringing the site up to federal web security standards.

01 · Development

Targeted new functionality

On the client's request, we design and build compact modules into the existing site that improve the resident experience and reduce the load on call-center operators.

Hot water shutdown schedule for 8 cities
Reference information modules
Optimization of existing sections
Integration with internal systems

Case exampleHot water schedule

02 · Security

Compliance with federal standards

Regular vulnerability audits, strengthening security to meet 152-FZ and industry web security standards, round-the-clock monitoring, fast incident response.

Vulnerability audits and pentests
WAF, anti-bot, DDoS protection
Personal data protection (152-FZ)
Incident response procedures

Compliance100%

Case · Hot water shutdown schedule

A live shutdown schedule
for hot water across the whole republic

Every summer, heat networks are taken offline for scheduled maintenance. Thousands of calls flood the call center with one question: "When will my hot water be shut off?" We built an interactive schedule into the site, where a resident finds their address and maintenance dates in 3 seconds.

Product solution

One screen —
all 8 cities

The user filters by city and district, sees the shutdown period and current status (scheduled / in progress / completed). Data updates promptly from BashRTS's internal systems.

Cities in the schedule8

Data updatesReal-time

FiltersCity · District · Street

FormatTable + map

Live mockup · hot water schedule

up to date

Ufa · Kirovsky district

Jun 5 — Jun 18

Sterlitamak · center

Jun 12 — Jun 25

Salavat · district

not scheduled

Neftekamsk

Jun 19 — Jul 2

Cities in the schedule 8 / 8

Requests by city

✦ Summer season

Ufa

45%

Sterlitamak

19%

Salavat

15%

Neftekamsk

11%

Ishimbay

Sibay · Blagoveshchensk · Agidel

Across all 8 cities 100 % of requests

Traffic over time

peak July

×1

Jan

×1

Feb

×1

Mar

×2

Apr

×4

May

×7

Jun

×9

Jul

×6

Aug

×2

Sep

Load increase during shutdown season up to 9× the monthly average

Key metrics

last 12 months

100%

Coverage
across 8 cities

99.9%

SLA
uptime

90%

Requests
without the call center

3 sec

Response
to the user

Hot water module · product metrics measured continuously

Case · Compliance with federal standards

Multi-layered security for the portal
with an industrial SLA

The portal is one of the key digital channels for the republic's heat energy operator. Downtime or a data leak are unacceptable. We built several layers of defense that comply with federal regulations and industry web security standards.

Layers of protection · top to bottom

from the perimeter to data · all under 24/7 monitoring

WAF and perimeter protection

Filtering malicious requests at the web application level. OWASP Top 10 rules.

Level 1

DDoS and bot protection

Industrial-grade anti-DDoS, rate-limiting, behavioral analysis of suspicious traffic.

Level 2

Personal data protection

Encryption, access control, compliance with 152-FZ requirements.

152-FZ

Vulnerability audits

Regular scanning, scheduled pentests, reporting.

Regular

Round-the-clock monitoring

SOC-as-a-service: observation, alerting, immediate incident response.

24/7

WAF ✦

Anti-DDoS ✦

152-FZ ✦

Pentests ✦

SOC 24/7 ✦

Incident response ✦

Vulnerability audits ✦

SLA 99.9% ✦

WAF ✦

Anti-DDoS ✦

152-FZ ✦

Pentests ✦

SOC 24/7 ✦

Incident response ✦

Vulnerability audits ✦

SLA 99.9% ✦

Geography

Eight cities across the republic —
one data showcase

The hot water schedule and reference information cover all eight cities where BashRTS LLC operates. A resident of any of them gets up-to-date information from a single source, without calls or being transferred between operators.

01Ufa
02Sterlitamak
03Salavat
04Ishimbay
05Sibay
06Neftekamsk
07Blagoveshchensk
08Agidel

Republic of Bashkortostan

8 cities served

Network infrastructure 1 786 km · 35 boiler houses · 357 DHS

Ongoing support

What we do
every day

Beyond major feature development and security work — day-to-day work on keeping the site stable, responding to client requests, and preventive improvements.

Monitoring 24/7

Watching uptime, performance, and the correct operation of key modules.

Incident response

Fast issue containment, resolution, and post-incident analysis under the agreed SLA.

Scheduled updates

Regular patches for the CMS, dependencies, and security modules. Nothing goes stale without a risk assessment.

Targeted evolution

New modules on the client's request that don't require a full storefront overhaul.

Case · Problem → Solution → Result

How we take the load off the call center
and secure the portal

Problem

The portal is critical, but load and security need to be handled at an industrial level

bashrts-rb.ru is the public portal of the region's largest heat energy operator. Thousands of residents visit it daily for reference information, especially during peak shutdown seasons. At the same time — it's a significant digital asset that must comply with federal security regulations. It's more convenient for the client not to carry this whole layer of work alone.

Solution

Partnership: development + security + monitoring

We became a long-term technology partner across two tracks. The first — development: we designed and built a hot water schedule module that takes a significant share of repetitive calls off the call center. The second — security: we built a multi-layered security scheme compliant with 152-FZ, industry web application security standards, and round-the-clock monitoring.

Result

A stably running portal with industrial-grade security

A resident of the republic sees when their hot water will be shut off in 3 seconds — without calling the call center. The portal handles peak-season load, complies with federal security regulations, and any incidents are contained and resolved within the agreed SLA. The partnership continues, and the functionality keeps evolving.

Stack and role

Technologies
we integrated

We work within the site's existing technology stack. On top of that, we added industrial-grade security and monitoring tools.

⌘ Stack we work with

Integration into the existing platform

Backend & CMS

Site CMS PHP MySQL Custom modules

Module frontend

HTML5 · SCSS · JS Responsive markup Cross-browser support

Security

WAF Anti-DDoS 152-FZ compliance Pentests

Monitoring

Uptime monitoring Log aggregation 24/7 alerting

✦ What we do

Scope of responsibility

Designing new modules on the client's requests
Development and integration into the existing site
Configuring and maintaining WAF and anti-DDoS
Bringing security into compliance with 152-FZ
Regular vulnerability audits and pentests
Monitoring uptime and performance 24/7
Incident response within the agreed SLA
Scheduled updates for modules and dependencies
Post-incident analysis and reporting

Result

What changed
for the client and residents

Before

Calls to the call center

↓

After

An answer on the site
in 3 seconds

A resident finds their city and sees the shutdown dates without calling an operator.

Before

Fragmented security

↓

After

Compliance with federal standards

Multi-layered security with WAF, anti-DDoS, 152-FZ compliance, and 24/7 monitoring.

Before

Reactive support

↓

After

A long-term
partnership

Strategic support with planned portal evolution and preventive protection.

Let's start with a free audit

Let's check your portal
for vulnerabilities

In 24 hours we'll run an express audit of your site's security and uptime, send you a report, and propose a support plan. No obligations and no charge for the first step.

Request website support Get in touch

BashRTS — we evolve and secure it

We're not the site's developers — we're a growth and security partner

Only evolution and security. We don't redesign the storefront

New functionality on the client's request

Security to federal standards

Monitoring and response

Site storefront development

Feature development and infrastructure security

Targeted new functionality

Compliance with federal standards

A live shutdown schedule for hot water across the whole republic

One screen — all 8 cities

Requests by city

Traffic over time

Key metrics

Multi-layered security for the portal with an industrial SLA

WAF and perimeter protection

DDoS and bot protection

Personal data protection

Vulnerability audits

Round-the-clock monitoring

Eight cities across the republic — one data showcase

Republic of Bashkortostan

What we do every day

Monitoring 24/7

Incident response

Scheduled updates

Targeted evolution

How we take the load off the call center and secure the portal

The portal is critical, but load and security need to be handled at an industrial level

Partnership: development + security + monitoring

A stably running portal with industrial-grade security

Technologies we integrated

Integration into the existing platform

Scope of responsibility

What changed for the client and residents

Let's check your portal for vulnerabilities

Связанные услуги

BashRTS —
we evolve and secure it

We're not the site's developers —
we're a growth and security partner

Feature development
and infrastructure security

A live shutdown schedule
for hot water across the whole republic

One screen —
all 8 cities

Multi-layered security for the portal
with an industrial SLA

Eight cities across the republic —
one data showcase

What we do
every day

How we take the load off the call center
and secure the portal

Technologies
we integrated

What changed
for the client and residents

Let's check your portal
for vulnerabilities