699 240 879 Calle Federico Cantero Villamil 2B · Móstoles Monday to Friday, 09:00 to 18:00
699 240 879 Request a quote

Cybersecurity for businesses in Móstoles

See your business the way an attacker sees it

We review from the outside what an attacker can see of your business. You receive a report for management in plain language and a prioritised technical plan, ranked by impact and effort.

Start with the assessment Call or write to us

Monday to Friday, 09:00 to 18:00 699 240 879

Analyst's workstation with two monitors showing network graphs and a person seen from behind, out of focus, in the late afternoon

Review from the outside

  • Inventory of domains, subdomains and services exposed to the internet
  • Review of your email configuration: SPF, DKIM and DMARC
  • Search for company credentials in known public leaks
  • Review of the security configuration of Microsoft 365 or Google Workspace
24hours

a day, 7 days a week, on the incident line

5working days

to deliver the assessment report and plan

48hours

for the fixed quote after the assessment

10days

to get monitoring up and running

First know where you stand, then decide

We speak so that the people who make the decisions understand us. Every service includes a report for management in plain language and a prioritised technical plan.

We never publish a client's name or the details of an incident without their written authorisation.

Empty technical office with a long wooden desk, two monitors switched off, chairs tucked in and a large window with light-coloured blinds

It is worth saying early on: nobody can assure you that your business will not suffer an attack, and neither can we.

What we do is review what is left exposed, monitor alerts 24 hours a day, 7 days a week, contain compromised devices and run regular recovery tests, with the time they take set down in writing.

If an incident happens, the line is staffed 24 hours a day, 7 days a week, and we give a first response in less than 4 hours during business hours.

Common reasons to request it

These are the common reasons for requesting an assessment. If you recognise yourself in any of them, it will help you replace assumptions with facts.

Exposure assessment

  1. You do not know which of the company's services are published on the internet or who reviews them.
  2. A client or an insurer asks you for information about your security.
  3. You want an order of priorities before deciding what to invest in.
  4. You suspect that one of the company's passwords has appeared in a leak.

Penetration testing

  1. You are about to launch a new website or application and want to test it first.
  2. A client or an insurer is asking you for a recent pentest report.
  3. You have changed IT provider and want to know where everything stands.
  4. You want to check how far someone already inside your network could get.

What we do

We see where you stand, test what you have, monitor and respond if something happens. Here are six services to start with.

We also strengthen Microsoft 365 and Google Workspace, train your staff against phishing and offer an outsourced security lead for businesses that cannot justify that role full time.

Printed report with bar charts and colour markings on an oak table, next to a closed laptop
  • Security audit

Exposure assessment

We review from the outside what an attacker can see of your company and give you a report for management and a prioritised plan.

  • SMEs with 10 to 250 employees
  • Report for management
Start with the assessment
Hand paused over a laptop touchpad, in front of a blurred email inbox, in an office in the morning

Security awareness and phishing simulation

Practical training for your staff and simulated phishing emails, with aggregated results for management.

 Person seen from behind pointing at a diagram of boxes and arrows on a whiteboard, in a small meeting room

Outsourced security lead (vCISO)

A person responsible for your company's security, without hiring them full-time.

 Physical security key plugged into a laptop and a mobile phone with a verification screen on a light-coloured desk

Microsoft 365 and Google Workspace security

We review and strengthen the configuration of your Microsoft 365 or Google Workspace: access, email and devices.

How we start working with you

Hands drawing a network diagram in pencil with nodes and arrows on a large sheet, among blank sticky notes

  1. Call and scope

    We start with a call to get to know the business and agree the scope. After that, what we are going to review is authorised in writing.

  2. Review from the outside

    We inventory the domains, subdomains and services exposed to the internet. We review your email configuration: SPF, DKIM and DMARC. We look for company credentials in known public data leaks.

    And we talk to the person responsible for your systems about backups, access and devices. The assessment does not launch attacks or tests that could affect the service.

  3. Report and meeting

    Within 5 working days you receive the report for management and the prioritised technical plan. We then meet with you to explain the results and answer your questions.

  4. The decision is yours

    The plan can be carried out by your team, your IT provider or whoever you choose. Fixing the issues is quoted separately.

    If you later take on another service with us, we build on this assessment. We give a fixed written quote within 48 hours of the assessment.

What you receive, in writing

Every service includes a report for management in plain language and a prioritised technical plan.

Oteo

Report for management in plain language

  • Inventory of domains, subdomains and services exposed to the internet.
  • Review of your email configuration: SPF, DKIM and DMARC.
  • Search for company credentials in known public leaks.
  • Review of the security configuration of Microsoft 365 or Google Workspace.
  • Interview with the person responsible for your systems about backups, access and devices.

Meeting with management to present the results.

Oteo

Technical plan prioritised by impact and effort

The plan is yours and anyone you choose can carry it out, whether your own team or your IT provider. It is written for exactly that, with the actions ordered by priority.

What if I have already been attacked?

Call the incident line as soon as possible; it is staffed 24 hours a day, 7 days a week.

Do not delete anything or reinstall devices: disconnect them from the network and wait for instructions, because the evidence helps establish what happened.

We give a first response in under 4 hours during business hours. After that we contain the attack, investigate its source and help you get back up and running.

Call 699 240 879
24 hours

Line staffed 24 hours a day, 7 days a week

4 hours

First response in under 4 hours during business hours

Questions before you sign up

  • Is there a minimum contract term for the monthly services?

    The monthly services have no minimum term.

    You can pay by bank transfer or by card, and the prices we quote you do not include VAT (21%).

  • Do I have to change IT provider?

    No. We work alongside your provider or your in-house team. We take care of security and they take care of day-to-day IT.

  • Do I need to install anything on my devices?

    No. The review is done from the outside, using what anyone can see on the internet, plus read-only access to Microsoft 365 or Google Workspace that you give us.

  • Is fixing what you find included?

    No. Fixing the problems found is quoted separately. The plan is yours, so whoever you choose can also take care of it.

  • Can I call if I am not a client?

    Yes. Incident response can be engaged on the spot, without having any other service with us.

  • And if my business is outside the Comunidad de Madrid?

    In the rest of Spain we work remotely.

Brick and glass office building at the blue hour, with monitors switched on behind a lit window

From Móstoles, working remotely anywhere in Spain

We are at Calle Federico Cantero Villamil 2B, 28935 Móstoles, and have been operating since 2026. We work remotely anywhere in Spain and on site in the Comunidad de Madrid.

That means that in the Comunidad de Madrid we can come to your business in person if needed during an incident, and training sessions can be held in person.

We are available Monday to Friday from 09:00 to 18:00. Aitor looks after management and client relationships.

Monday to Friday
09:00 to 18:00
Saturdays and Sundays
Closed

Company address

Calle Federico Cantero Villamil 2B 28935 Móstoles (Madrid) 699 240 879

Frequently asked questions

All questions
Where should a company that has never reviewed its security start?

The usual starting point is the exposure assessment. We review from the outside what an attacker can see of your company: domains, email, services exposed on the internet, leaked passwords, your Microsoft 365 or Google Workspace configuration and the state of your backups. Nothing needs to be installed on your devices. You receive a report for management and a prioritised plan, and with that you decide where to invest first.

How is each service quoted?

According to what needs to be covered. Monitoring fees depend on your devices and servers; backups, on the volume of data and the systems; Microsoft 365 or Google Workspace, on the users and domains; security awareness, on the number of people. For compliance we look at the standard, your size and what you already have in place, and the fixed quote reaches you in writing within 48 hours of the assessment.

What is the difference between antivirus software and a managed SOC?

Antivirus blocks what it recognises and leaves an alert. With a managed SOC, those alerts are reviewed, what the antivirus cannot see is investigated, and action is taken when an attack is under way. We monitor alerts 24 hours a day, 7 days a week, analyse each one to rule out false alarms and send a monthly activity report for management.

Does NIS2 apply to my company?

It depends on your sector and size. The NIS2 Directive applies to medium-sized and large companies in the sectors listed in its Annexes I and II, and only in some cases to small ones. As of 6 November 2026, the Spanish law transposing the directive has not been published in the BOE (Spain's Official State Gazette). We can review it with you in a consultation, but legal advice on whether a specific law applies to you is not part of our service.

Does Oteo hold certifications, or does it certify other companies?

We do not certify: ISO/IEC 27001 or ENS certification is issued by an independent certification body. We prepare the company and support it through the audit. If you need to know whether we hold a particular accreditation, ask us by phone or by email. When comparing providers, it is good practice to ask for the exact name of each certification, its scope and its date.

Tell us where your business stands

Call us Monday to Friday from 09:00 to 18:00 or write to [email protected]. We agree the scope and tell you how to proceed.

If something has already happened, do not erase anything or reinstall devices: disconnect them from the network and call the incident line, which is staffed 24 hours a day, 7 days a week.

We will help you even if you do not have any other service with us.

699 240 879

Monday to Friday, 09:00 to 18:00

See phone and email