Cybersecurity for businesses: prevent, detect and recover

We find where your company is exposed, close the gaps in order of risk and keep watch so they stay closed. With our own team in Bilbao and the backing of Fortinet, Microsoft and Veeam.

Request an assessmentRequest support

Cybersecurity services

From the network and remote access to workstations, backups and the plant.

Migration from SSL VPN to IPsec and Zero Trust

Recent versions of FortiOS no longer support SSL VPN in tunnel mode, and its portal has been one of the entry points most exploited by ransomware. We migrate your remote access to IPsec with two-factor authentication or to ZTNA, without disrupting remote work. Read what has changed.

  • Inventory of current users, groups and access
  • IKEv2 IPsec tunnel with FortiToken or Entra ID
  • Centralised FortiClient deployment
  • Pilot, out-of-hours cutover and closure of the SSL port
Request information

Penetration testing

A penetration test simulates what a real attacker would do against your company, with a scope and rules agreed in writing. The result is a report showing what was achieved, how, and what needs fixing first.

  • External penetration test: website, VPN and published services
  • Internal penetration test: what happens if an office computer is compromised
  • Active Directory and Microsoft 365 review
  • Retesting after fixes
Request information

Vulnerability scanning

Vulnerability scanning automatically and regularly checks all your devices, servers and network equipment for known weaknesses. It is the ongoing check-up; the penetration test is the in-depth examination.

  • Scheduled internal and external scanning
  • Prioritisation by real risk, not just by score
  • Monthly report showing progress
  • Follow-up of each fix until it is closed
Request information

RMM: managed patching and monitoring

With a remote monitoring and management (RMM) platform we see the status of all your devices in real time, apply Windows and third-party application patches in agreed windows and receive alerts before a failure stops you.

  • Always up-to-date hardware and software inventory
  • Automated patching with compliance reports
  • Alerts for disks, services, backups and antivirus
  • Detection of unsupported devices, such as Windows 10
Request information

Managed detection and response (EDR/MDR)

Traditional antivirus is no longer enough. We protect devices with EDR, which detects suspicious behaviour as well as known viruses, and with the managed service (MDR) we review the alerts and isolate a compromised device.

  • FortiEDR and Microsoft Defender for Business
  • Remote isolation of the affected device
  • Investigation and clean-up after an incident
Request information

Immutable backup and ransomware recovery

The last line of defence against ransomware is a copy the attacker cannot delete or encrypt. With Veeam we set up immutable, offline backups and check that they can be restored.

  • Immutable backups of servers, virtual machines and Microsoft 365
  • Off-site copy following the 3-2-1 rule
  • Regular, documented restore tests
Request information

Industrial cybersecurity (OT)

On the plant floor, downtime costs more than in the office. We separate the production network, control maintenance suppliers' remote access and protect devices that cannot be patched.

  • OT network segmentation with FortiGate
  • Controlled and logged remote access for suppliers
  • Inventory of industrial assets
Request information

NIS2 and ENS compliance

We assess your position against the NIS2 directive and Spain's National Security Framework (ENS) and give you a realistic, phased and costed compliance plan. We also help you with the security questionnaires your customers send you. Status of the law in Spain.

  • Gap analysis and prioritised plan
  • Incident notification procedure
  • SPRI grants to fund the project
Request information

Penetration test or vulnerability scanning?

They are not the same thing, and the usual approach is to combine them.

Vulnerability scanning

Automatic and continuous. It finds known weaknesses on all your devices, every week or every month. It answers the question: what have I left unpatched?

Penetration test

Manual and periodic, once or twice a year or after a major change. It chains weaknesses together as an attacker would. It answers the question: how far could they get?

How we work

The same method for an SME with ten workstations as for a plant with hundreds of devices.

  1. We assess

    We review your network, access, backups and devices, and measure your exposure from the internet.

  2. We prioritise

    We give you a plan ordered by risk and cost, separating the urgent from the desirable.

  3. We protect

    We implement the measures with our own team and as little disruption as possible.

  4. We monitor

    We monitor, patch and review so that security does not degrade over time.

Project types

Some of the cybersecurity projects we deliver most often for industrial and service companies in Bizkaia:

  • Migration of remote access from SSL VPN to IPsec with two-factor authentication before upgrading FortiOS.
  • External and internal penetration test with a remediation plan and a retest at the end.
  • Managed patching and vulnerability scanning service with a monthly report.
  • Separation of the plant network and controlled remote access for machinery suppliers.
  • Ransomware recovery: immutable backups and a restore drill.
  • NIS2 assessment funded by SPRI's cybersecurity grants.

Cybersecurity news

Vendor, regulatory and funding changes worth keeping on your radar.

See all news

Do you know where your weakest point is?

We carry out an initial assessment of your exposure and tell you what to fix first, with no obligation.

Request an assessment