Cybersecurity audit: where your company is exposed and how to fix it

It depends on the size of your company and the scope, and we give you the schedule on the first call. On your side, the time needed is small: an initial meeting of one to two hours, the odd question and the results presentation. Once we finish the analysis, you get the report within 48–72 hours.

We don't install anything permanently. What can be seen from the internet we analyse from outside. For the scanner, the pentest and the internal review, such as your Microsoft 365 or Google Workspace, we agree with you which systems are included, with what access and at what time, always with your written authorisation. Access is temporary and removed when we finish.

As little as possible. Most of the work is ours. Tests that could affect a service, such as the pentest, are run at a time we agree with you, for example outside office hours.

Nothing technical to start with. Before the meeting we ask for basic details: what the company does, how many people work on a computer, which email you use (Microsoft 365, Google Workspace or another), your management software, where you store documents and who looks after your IT. If there's been a recent incident, it also helps to know. We go through the rest together.

No, but ours includes one. A pentest, or penetration test, is a controlled, authorised attack on specific systems to see how far an attacker could get. An audit is broader: it has a functional part (how you work, access, processes) and a technical one, in which our own AI scanner finds vulnerabilities and possible attack vectors, and we then validate them with security testing and pentesting. An expert consultant reviews every result.

If something is serious, we tell you as soon as we spot it, without waiting for the report. Everything else goes into the report with its priority, its impact and the recommended action. In the presentation we decide with you where to start and who takes care of each item.

Yes: a one-page executive summary, the overall and per-area risk level, the scanner and pentest results, each finding explained with its impact and fix, and a prioritised roadmap. We don't just send it over: we present it in a meeting and answer every question.

Yes, if you want. We can implement the improvements with you, from two-factor authentication or email protection to permissions, backups or anti-fraud procedures, and coordinate with your IT provider on anything that depends on them. You can also continue with one of our care plans, which include the initial audit. And if you'd rather carry it out yourselves, the roadmap is designed for that.

It helps, but it isn't a certification. It doesn't certify ISO 27001 or ENS (Spain's National Security Framework), nor does it replace a formal data protection audit. It gives you a documented picture of your situation and an improvement plan, useful when a client, an insurer or a partner asks how you protect information. We also review GDPR basics, such as the record of processing activities or the breach procedure. If you need to prepare for a formal audit, the Security Partner plan includes support with audits and compliance.

From €990 + VAT. The final price depends on the size of your company and the systems we include in the pentest, and we give you a specific figure on the first call, which is free. If you take out a care plan, the initial audit is included at no extra cost.