Services

Security, with scope and price fixed from day one.

Six service lines designed for businesses that need to protect their website and systems. Every quote is fixed before starting.

No middlemen, no salespeople NDA included on every project Prices excl. VAT
Service 1

Web Security Audit

Manual analysis of your website or application following the OWASP Top 10 methodology, focused on what actually matters: exploitable vulnerabilities, not just an automated scan.

  • SQL injection, XSS, CSRF, IDOR and misconfigured CORS
  • Authentication, session and access control review
  • Security headers and server configuration
  • Technical report with evidence (screenshots, requests) and CVSS scores
  • Executive report in plain language for management
€450–€1,400 +VAT
1–2 weeks · Fixed quote
Request audit →
Ideal for SMEs and corporate websites who want to know their real exposure before an attacker finds it.
Service 2 · Most complete

Deep Security Assessment

Full pentesting with controlled manual exploitation. I don't just identify vulnerabilities — I demonstrate their real business impact by chaining findings the way a real attacker would.

  • Black-box, gray-box or white-box testing based on your needs
  • REST API, GraphQL and authentication coverage (JWT, OAuth)
  • Manual exploitation with documented attack chain
  • Risk heat map and prioritized remediation roadmap
  • 30-minute call to present results to management
€1,400–€3,800 +VAT
3–4 weeks · Results call included
Request assessment →
Ideal for Companies with sensitive data, critical APIs, or that need to demonstrate due diligence to clients or regulators.
Service 3 · Forensics

Digital Forensic Analysis

In-depth technical investigation after an incident or suspected unauthorized access: what happened, how attackers got in and which systems were affected, following ISO/IEC 27037 methodology.

  • RAM and disk memory acquisition and analysis
  • Incident timeline reconstruction
  • Forensic analysis of corporate computers and mobile devices
  • Chain of custody compliant with ISO/IEC 27037
  • Technical report and executive summary of findings
€550–€2,200 +VAT
Urgent response available separately
Discuss your case →
Ideal for Businesses that need to understand the real scope of a security incident with traceable technical evidence.
Service 4 · Continuity

Monthly Monitoring

An audit is a snapshot; new vulnerabilities don't wait. I review your exposed attack surface every month to catch risks before they become an incident.

  • Monthly review of new vulnerabilities (CVEs)
  • SSL certificate, headers and configuration checks
  • Detection of new subdomains or unauthorized exposure
  • Monthly report with status indicator
  • Immediate notification if something critical appears, without waiting for the report
€70–€180/mo +VAT
No lock-in · Cancel anytime
Start monitoring →
Ideal for Businesses that already had an audit and want to maintain their security posture without hiring someone full-time.
Service 5 · Public tenders

Public Tender Cybersecurity Audit

A technical and regulatory compliance report designed to meet the requirements local councils and public administrations demand as mandatory documentation in tender processes.

  • Vulnerability analysis and/or penetration testing of the tendered system
  • Data protection compliance review (GDPR/LOPDGDD)
  • Report specifically scoped to the system or platform under contract
  • No INCIBE involvement or ENS/ISO 27001 certification required
  • Delivery aligned with award and documentation submission deadlines
€2,500–€4,500 +VAT
1–2 weeks · Scope and price fixed before starting
Request report → See what tenders require →
Ideal for Companies and technology vendors bidding on public concessions or contracts who need to demonstrate the technical and regulatory compliance of their platform.
Service 6 · Expert witness

Party-Appointed IT Expert Witness Report

IT expert reports with legal standing for judicial or extrajudicial proceedings: recovery and analysis of digital evidence (WhatsApp, emails, devices, social media), prepared to expert-witness standards.

  • Forensic analysis and extraction of digital evidence (phones, computers, WhatsApp, email, social media)
  • Expert report with methodology, chain of custody and technical conclusions
  • Drafted for use in judicial or extrajudicial proceedings
  • Available to ratify the report in court if required
  • Prepared as a Party-Appointed IT Expert Witness, AEPEJU Chartered Member
€400–€1,800 +VAT
Court ratification available separately
Request report →
Ideal for Individuals, lawyers and businesses who need an IT expert report valid as evidence in a judicial or extrajudicial proceeding.
Not sure which one you need?

Tell me your situation and I'll tell you.

First consultation free, by video call or email, no obligation.