Cybersecurity in Móstoles for businesses
Oteo is a cybersecurity company based in Móstoles. We work remotely anywhere in Spain and on site in the Comunidad de Madrid. If needed, we come to your business in person.
Our head office is in Móstoles
- We are at Calle Federico Cantero Villamil 2B, 28935 Móstoles.
- That is the company's address.
- The work is done on your systems: remotely or, within the Comunidad de Madrid, also at your premises.
Read more Read less
For a business in Móstoles, this means two things. First, several services do not require anyone to travel. The exposure assessment, for example, is carried out from outside and nothing has to be installed on your devices. Second, when someone needs to be there, we can come in person.
If your business has offices outside the Comunidad de Madrid, those sites are supported remotely. We work this way anywhere in Spain.
We are available Monday to Friday, 09:00 to 18:00. We are closed on Saturdays and Sundays. The incident line runs separately: it is staffed 24 hours a day, 7 days a week.
- Head office: Calle Federico Cantero Villamil 2B, 28935 Móstoles
- On-site work: Comunidad de Madrid
- Remote work: anywhere in Spain
- Office hours: Monday to Friday, 09:00 to 18:00
What is done remotely and what in person
- Not every service is delivered in the same way.
Read more Read less
Before hiring any provider, it is worth asking three things: which part is done remotely, which part needs someone at your business and who on your team has to be available.
In incident response, within the Comunidad de Madrid we can come in person if needed. We contain the attack, find out what has happened and help you get your business running again. The first response arrives in under 4 hours during business hours.
In security awareness, the training sessions are short. They are held remotely or, in the Comunidad de Madrid, in person. If your staff work together in Móstoles, you can weigh up which of the two options disrupts work less.
The outsourced security lead (vCISO) works remotely and, in the Comunidad de Madrid, also in person when needed. They meet every month with the member of management you designate.
In penetration testing, it depends on the test. External testing is done from the internet. Internal testing is done while connected to your network, remotely or in person.
24/7 monitoring relies on an agent that is installed remotely, in stages, on each covered device and server. We then monitor the alerts 24 hours a day, 7 days a week. Automatic backups are stored away from your premises. And in compliance, we work with your team to prepare the evidence, and we support you during the certification audit.
No cybersecurity company can guarantee that you will never suffer an incident. What we can do is help you see what you have exposed, review the alerts, respond following a procedure and check that you can recover from your backups.
Who you deal with
- Aitor looks after management and client relationships.
- We have been operating since 2026.
Read more Read less
A security provider gets to see sensitive information about your business. That is why it is worth knowing who you are talking to and what you will receive. In our case, every service includes a report for management in plain language and a prioritised technical plan.
Nor do we talk about what we see. We never publish a client's name or the details of an incident without their written authorisation.
What we do in Cybersecurity in Móstoles
Exposure assessment
We review from the outside what an attacker can see of your company and give you a report for management and a prioritised plan.
Penetration testing
Controlled, authorised penetration tests on your website, your applications or your infrastructure.
24/7 monitoring and response
Managed SOC for SMEs: we monitor computers and servers around the clock, analyse the alerts and, if an attack is real, we contain it and let you know.
Incident response
We contain the attack, find out what has happened and help you get your business running again.
Microsoft 365 and Google Workspace security
We review and strengthen the configuration of your Microsoft 365 or Google Workspace: access, email and devices.
Backup and continuity
Immutable backups stored off your premises and recovery tests with the time measured.
Security awareness and phishing simulation
Practical training for your staff and simulated phishing emails, with aggregated results for management.
NIS2, ENS and ISO 27001 compliance
We prepare your company for NIS2, ENS or ISO/IEC 27001 and support you through the audit.
Outsourced security lead (vCISO)
A person responsible for your company's security, without hiring them full-time.
Questions about cybersecurity in Cybersecurity in Móstoles
Do I have to visit the Móstoles office to hire a service?
There is no need. We work remotely anywhere in Spain and on site in the Comunidad de Madrid. To get started, just call or send an email.
Can you come to my business if it is in Móstoles?
Yes, when needed. In the Comunidad de Madrid we can come to your business in person, for example for an incident or to run an in-person training session.
And if my business is outside the Comunidad de Madrid?
In the rest of Spain we work remotely.
When can I call?
We are available Monday to Friday, 09:00 to 18:00. The incident line is staffed 24 hours a day, 7 days a week.
Do I need to be a client to ask for help with an incident?
No. Incident response can be engaged there and then, without having any other service with us.
What does the price depend on?
On the service and the scope: for example, the number of domains, users or devices. In compliance, we provide a fixed written quote within 48 hours of the assessment. Call us and we will explain how it is calculated in your case.
Company address
Tell us what your business needs
Call us on +34699240879 or email us at [email protected]. We will ask what your business does and what concerns you, and tell you how to proceed.
Read more Read less
If you are not sure where to start, the exposure assessment is the starting point for all our other services. We review from outside what an attacker can see of your business and deliver the report and the prioritised plan in 5 working days. The plan is yours, and anyone you choose can carry it out.
If something has already happened, call us as soon as possible. Do not delete anything or reinstall devices: disconnect them from the network and wait for instructions. The evidence helps establish what happened.