Cybersecurity
We review, fix and watch over the security of your systems, your data and your access.
- Starts with
- A conversation
- Agreed
- In writing
- Delivered
- In parts
- After launch
- We stay on
What it covers
We cover cybersecurity from prevention and auditing through to incident response. We look for weaknesses before an attacker does, fix them and leave a written record of what was done and what is left.
- 01Security audits and penetration testing
- 02Infrastructure hardening
- 03Threat monitoring and detection (SIEM)
- 04Forensics and incident response
- 05Policies and controls based on recognised frameworks (NIST, OWASP)
How we do it
How we approach security
Phase 01 of 03
Assessment and diagnosis
Every cybersecurity engagement starts with a deep look at your infrastructure and current risks.
You get
- Vulnerability analysis
- Risk and threat assessment
- Attack surface mapping
Phase 02 of 03
Implementation and protection
We design and deploy the security controls your infrastructure needs to be protected.
You get
- Firewall and WAF configuration
- Access control implementation
- Continuous monitoring rollout
Phase 03 of 03
Monitoring and continuous improvement
Cybersecurity is not a project that ends; it is a process of permanent improvement and vigilance.
You get
- Ongoing threat monitoring
- Security incident response
- Regular updates and reporting
Where we did it
Projects with this service
Projects where we did it, from the idea to the screens.
CISEP
Vive Sin Miedo
FedeliqHow we start
A conversation
We understand what you need and propose, in writing, the scope, the schedule and the price before we start.
Start a projectWhy us
What you get
- 01
Threat intelligence
We check public threat sources and known vulnerabilities (CVE) to prioritise what actually exposes your systems, instead of trying to fix everything at once.
- 02
Cloud security
We protect your cloud environments (Google Cloud, Firebase, Supabase) with secure configuration, identity management and least-privilege access. We review rules, keys and permissions to prevent unauthorised access and data leaks.
- 03
Regulatory compliance
We help you put policies, procedures and technical controls in order, based on recognised frameworks such as NIST and the data protection rules that apply to you. Everything is written down so you can show it in an audit.
- Proactive threat detection
- Reduced risk of data breaches
- Compliance with security regulations
- An incident response plan
- Protection of your company's reputation
- Backups and a recovery plan
- Full visibility over your infrastructure
- Team training and awareness
- Cost savings from preventing attacks
Specialties
Tools in these projects
- Angular
- Firebase
- TypeScript
- Leaflet / Mapas
- PWA
- Next.js
- React
- Leaflet/OpenStreetMap
- GA4
- Figma
- Google Analytics
- Bootstrap
- Firebase AI Logic
- cheerio
01What does a security audit include?
Our audit covers vulnerability analysis, configuration review, security policy assessment, controlled penetration testing and a detailed report with prioritised recommendations.
02What is penetration testing and why do I need it?
Penetration testing simulates real attacks on your systems to find vulnerabilities before attackers exploit them. It is essential for validating that your security controls actually work.
03What happens if I suffer a cyberattack?
We help you contain the attack, remove the threat, recover your systems and understand what happened through forensic analysis. How emergencies are handled is set out in writing in the support agreement.
04How do you protect my customers' data?
We apply encryption at rest and in transit, role-based access control and activity logging, and help you meet the data protection rules that apply to your sector.
Other services
Everything else we do.
- 01App DevelopmentWe turn your ideas into robust, scalable software built around how you actually operate.
- 02Web Design & DevelopmentWe design and build websites that explain clearly what you do and lead visitors to get in touch or buy.
- 03Digital MarketingWe plan and run campaigns, content and SEO so your brand reaches the people who can actually buy from you.
- 05Enterprise NetworksWe design and install secure, well-organised networks for your offices, sites and servers.
- 06Digital TransformationWe sort out processes, choose tools and work alongside your team so daily work moves from paper and spreadsheets to systems people actually use.
- 07Artificial IntelligenceWe use artificial intelligence where it saves real work: reading documents, answering queries, classifying data and anticipating demand.
- 08Talent TrainingWe train teams in the technology they work with, or are about to: development, data, AI and security.