Case 001 · E-commerce · MadridSample
PCI DSS readiness for a mid-size online retailer
PCI DSSself-assessment completed and gaps closed
Technology we work with
Cloudflare
Shopify
Okta
AWS
Qualys
Stripe
Snort
GitHub
Red Hat
OracleHow it works
One clear roadmap.
Step 01
Assess.
A plain-English check of where you stand: your systems, your people, your risks.
See services →Step 02
Prioritise.
A ranked to-do list with owners and dates, so you know what matters first.
See services →Step 03
Fix.
We close the gaps with your team, one priority at a time, until each is done.
See services →Step 04
Prove.
Evidence and certification for customers, auditors and insurers: ISO 27001, SOC 2, PCI DSS.
See services →Step 05
Maintain.
Monitoring and monthly reviews, so security stays simple and stays done.
See services →Case 002 · SaaS · BarcelonaSample
SOC 2 readiness for a B2B software company
SOC 2controls mapped and evidence organised
Case 003 · Healthcare · ValenciaSample
Ransomware readiness for a group of clinics
Hoursnot days, to restore critical systems in a drill
01What do you do?
We help mid-size companies in Spain understand their cybersecurity risks and fix them, one priority at a time. We start with a roadmap: what to fix first, who does it and by when. Then we help you follow it, and prove it to your customers, auditors and insurers.
02Who do you work with?
Mid-size companies in healthcare, legal, industrial, tech and SaaS, e-commerce and financial services. You do not need a security team. We work with your IT people, or act as your security lead.
03How does it start?
You book a discovery call. On the call we go through what we noticed on your website and how we could fix it, and you leave with a clear next step. If you want to go ahead, we send a scoped proposal with a fixed price or a monthly fee.
04What is a security roadmap?
A short, ranked list of what to fix, in plain language, with who does what, by when, and roughly what it costs. It replaces the 100-page report nobody reads.
05How is pricing structured?
A fixed price per step or project, or a monthly fee for ongoing work such as monitoring or a fractional security lead. We quote after a short call, so there are no surprises.