Security & compliance
Practical security work for SMEs in the Canary Islands and across Spain, public bodies and their suppliers. This includes ayuntamientos, cabildos, Gobierno de Canarias agencies, universities and schools.
Website and exposure health check
A passive review of public websites and domains: publicly visible signs of outdated software, expired or broken certificates, missing security headers and leftover old subdomains. You receive a prioritised fix list. Public evidence may not reveal every software version.
Secure modernisation
Upgrade or rebuild outdated sites and servers, including old PHP, CMS versions and unsupported servers. Set up updates, backups and monitoring to keep them current.
ENS readiness
Gap analysis, policies and documentation, and technical measures for public bodies and companies that supply them, under the Esquema Nacional de Seguridad (RD 311/2022). This is preparation for certification by an accredited body, not the certification itself.
GDPR / RGPD technical review
Review data flows, access control, logging, retention and supplier checks, working alongside the client’s DPO. This is a technical review, not legal advice.
Web accessibility review
Review public-sector websites against RD 1112/2018 and the applicable requirements of EN 301 549. Identify accessibility barriers and prioritise fixes.
Supplier and cloud security review
Review the hosting, SaaS and IT providers your business depends on, including access, data handling, backups and responsibilities.
Ongoing security care
A monthly plan for patching, monitoring, backup checks and a short monthly report. We agree the scope and hours separately.
Testing beyond passive checks only happens with written authorisation.
Start with a free first call, then a paid analysis, usually €600–1,500, with scope and fee agreed first. Security work is priced after the analysis. We work in short iterations, measure the results and hand over the documentation and access. Targets to measure, not promises.