Fifteen service lines: eleven for businesses and four for individuals. Every quote is fixed before starting.
Manual analysis of your website or application following the OWASP Top 10 methodology, focused on what actually matters: exploitable vulnerabilities, not just an automated scan.
Full pentesting with controlled manual exploitation. I don't just identify vulnerabilities — I demonstrate their real business impact by chaining findings the way a real attacker would.
In-depth technical investigation after an incident or suspected unauthorized access: what happened, how attackers got in and which systems were affected, following ISO/IEC 27037 methodology.
An audit is a snapshot; new vulnerabilities don't wait. I review your exposed attack surface every month to catch risks before they become an incident.
A technical and regulatory compliance report designed to meet the requirements local councils and public administrations demand as mandatory documentation in tender processes.
IT expert reports with legal standing for judicial or extrajudicial proceedings: recovery and analysis of digital evidence (WhatsApp, emails, devices, social media), prepared to expert-witness standards.
This is the same methodology documented in my technical manual «DFIR y Peritaje Judicial» →
I prepare companies providing technology services to Spanish public administrations to demonstrate ENS compliance (RD 311/2022), increasingly required in public tender specifications.
Review of your website or app against WCAG 2.1 AA / UNE-EN 301549, mandatory for companies providing a public service under contract with the administration (RD 1112/2018).
Pentesting and security review packaged in the format investors and large corporate clients ask for before they sign.
Technical support from my cybersecurity background for the digital side of the school's LOPIVI protocol: how to respond, preserve evidence and secure devices in a cyberbullying or sextortion case. It complements — not replaces — the Wellbeing Coordinator's official child-protection training.
A hands-on 4-hour course so your team can spot phishing by email, text message, WhatsApp, phone call or QR code, know what to do if they have already clicked, and report it in time. Includes free access to my tools Lupa de cabeceras and Antes del Clic for everyday use.
Four services designed for individuals, not just companies: from shutting down unauthorized access to preparing a legally valid report.
Noticing strange logins, messages you didn't send, or a session you don't recognize? A video call to review your accounts, find out how they got in, and shut down access before it gets worse.
I go through it with you, step by step — phone, computer and accounts — to remove any trace of unauthorized access, malware or spyware, and give you a written report.
A simplified version of my expert witness report, designed to support a police report or proceedings for harassment, fraud or identity theft: what happened, what evidence exists and how it was obtained.
I manage the recovery of your account (Instagram, email, WhatsApp, Facebook...) through each platform's official channels. You pay a fixed handling fee, and only pay the rest if it's recovered.
No sales layers or middle management: you talk to me from the first email through report delivery, which means a tighter price without losing technical rigor.
We sign an NDA before any work begins. All findings and evidence are handled under GDPR and deleted at project close if you request it.
You still receive a report with the methodology applied and scope covered — useful as evidence of due diligence for clients, insurers or compliance audits.
Typically 50% when confirming the engagement and 50% on report delivery. For smaller projects, a single payment on delivery. No surprises: the price is fixed before starting.
100% remote across Spain. The initial consultation and results presentation are done by video call, no travel required.
The service covers detecting, documenting and prioritizing. Your technical team implements the fix, but I can support the process and validate that the fix closes the issue.
Message me as soon as possible, ideally within the first 24-48 hours — the sooner we act, the easier it is to shut down access and limit the damage. In a video call we'll go through what happened together.
Yes, exactly the same as with businesses: I can sign an NDA if you need one, and your data is handled under GDPR, deleted once the case closes if you ask.
Most cases are resolved remotely via screen share. Only expert-witness cases requiring deep forensic extraction might need the physical device.
Yes, the legally valid report is designed exactly for that: documenting evidence with expert-witness methodology to support a police report or legal proceedings.
With the account recovery service, you only pay the handling fee (€40-€60) if it isn't recovered — never the full amount.
Yes. It's one of the most common reasons for the legally valid report: documenting messages, screenshots and harassment patterns so they hold up as evidence.
First consultation free, by video call or email, no obligation.