Oteo is a cybersecurity company. Our address is Calle Federico Cantero Villamil 2B, 28935 Móstoles, and we have been operating since 2026. We provide cybersecurity consultancy and IT security audits, and we offer a managed security operations centre (SOC) for SMEs.
Aitor looks after management and client relationships. We work remotely anywhere in Spain and on site in the Comunidad de Madrid, so you do not need to be nearby to work with us.
We work alongside your IT provider or your in-house IT team. We take care of security and they take care of day-to-day IT. You do not have to change provider to work with us.
We never publish a client's name or the details of an incident without their written authorisation. That is why you will not see company logos or attack stories on this page.
Nor are we going to tell you that your business will never suffer an incident, because nobody can promise that. What we do is review what can be seen from the outside, monitor alerts 24 hours a day, 7 days a week, contain compromised devices and run regular recovery tests on your backups.
And we do not certify. ISO/IEC 27001 or ENS certification is issued by an independent certification body. We prepare your business to comply with these standards, carry out an internal audit ahead of the certification audit and support you during that audit.
Aitor
Aitor looks after the management of Oteo and client relationships.
How we work
- We start by seeing where you stand. The exposure assessment is the starting point for the rest of our services: we review from the outside what an attacker can see of your business. You do not need to install anything on your devices, and before we begin we set down in writing what we are going to review.
- We deliver the report and the prioritised plan within 5 working days, and then meet with management to explain the results. The plan is yours and can be carried out by whoever you choose. You are under no obligation to take on anything afterwards.
- Every service includes a report for management in plain language and a prioritised technical plan. The idea is that you can decide knowing what has been looked at, what has been found and what is best done first.
- Anything important is put in writing. In a penetration test we sign the authorisation and the testing window. In 24/7 monitoring we agree what we can do without calling you and what we cannot. In Microsoft 365 or Google Workspace you approve the change plan before we touch anything.
- We give a fixed written quote within 48 hours of the assessment. Managed services are paid by monthly subscription and have no minimum term. You can pay by bank transfer or by card.
- If something has already happened, you do not need to be a client. Our incident line is staffed 24 hours a day, 7 days a week, and we give a first response in less than 4 hours during business hours. In the Comunidad de Madrid we can come to your business in person if needed.
- To talk to us, call +34699240879 or write to [email protected]. We are available Monday to Friday from 09:00 to 18:00. If you start with the assessment, in the initial call we get to know the business and agree the scope.