Financiero-DORA6 min
DORA register of information software for ICT providers
What a tool should do with the register of information, what DORA covers beyond the register, how to run a gap analysis and what HodeiShield documents.
Feed by theme
Archive
Cadena de suministro-TPRM02
TPRM vs contractor management: prequalification and CAE
What risk each discipline covers, how they complement each other in a construction firm, what an operational TPRM platform needs and which integration questions to ask.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile9 min
How to choose a cybersecurity provider for mid-sized companies?
Eight criteria to compare providers, red flags, a sample weighted matrix and a downloadable checklist.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile7 min
Industria/OT-NIS2View all (9)
NIS2 compliance software
Which tools really help, how software should support the Article 23 incident flow, what evidence an MDM gives you and how to keep compliance over time.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile9 min
Supermarket Refrigeration Cyberattacks in Europe: the Second Wave and the Lesson for OT
Internet-connected, unpatched refrigeration controllers are OT assets that almost nobody would inventory. What is known about the new wave and what is worth reviewing.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile7 min
Linux Kernel TCP Flaw CVE-2026-98432: Which Distributions Have a Patch and What to Do Without One
A remote root exploit, conflicting severity ratings, and Ubuntu and RHEL without a fixed kernel: how to prioritize your Linux servers while the patch is pending.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile8 min
Seguridad de aplicaciones01
How do API and web application protection platforms handle zero-day attacks without causing false positives?
Anomaly scoring and thresholds, the positive security model, virtual patching, scoped exceptions and why you measure before changing anything.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile9 min
Ofensiva02
How to detect vulnerabilities in a SaaS application
Four layers of detection, the manual tests no tool can replace, how to prioritise findings and which evidence to keep.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile7 min
Red Team vs Pentest: When to Use Each One and Why the Difference Matters
Pentesting and Red Team are not synonyms. When to choose each one, what the regulation requires (ENS, DORA/TIBER-EU), and how Purple Team closes the loop.
Jon VelardiezLead PentesterLeads offensive audits: red team and web, mobile and infra pentesting.
View profile15 min
Why is AI payment security important for building trust?
What changes when an agent pays for a person, the three guarantees merchants and users need, and what AP2, Visa, Mastercard and the PCI SSC say.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile7 min
What is an agentic SOC?
A practical definition, how an agent works through an alert, autonomy levels, the evidence available and the questions to ask a provider.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile6 min
How does AI improve threat intelligence compared with traditional methods?
Where AI beats the manual method, what evidence exists (and how much comes from vendors), the risks it adds and how to adopt it without losing control.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile6 min
Inteligencia de amenazas01
What is threat intelligence?
Definition, types, the production cycle, the standards used to share it, and how a mid-sized company can start using it without building an analyst team.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile7 min
PymeView all (6)
How to protect a small business from cyberattacks
Ten measures ordered by return, a printable checklist and when it makes sense to ask for outside help.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile6 min
Fake ChatGPT and Claude apps: the Yoba campaign hides a cryptominer behind signed executables
The Yoba campaign uses signed OpenAI and Anthropic executables as bait. The flaw is not in the AI but in the origin of what gets installed.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile8 min
The threat operator in the SOC: how AI redefines defense and cybersecurity careers
AI is beginning to do the analyst's operational work. Human value is shifting toward directing the defense and answering for automated decisions.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile9 min
Sector público-ENS02
ENS for suppliers to the Spanish Administration: what Royal Decree 311/2022 requires from your company as a subcontractor
What Royal Decree 311/2022 requires from companies providing services to the Spanish Administration, directly or as subcontractors, and how to demonstrate compliance.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile10 min
ENS High vs ENS Medium: a practical guide to choosing the right category
The difference between ENS Medium and ENS High is strategic, not just technical. We break down the categorisation criteria, real cost, audit requirements and common mistakes.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile10 min
Financiero-DORA02
DORA Register of Information: how to complete the template under Regulation (EU) 2024/2956
A practical guide to the DORA Register of Information: templates B_01-B_99, xBRL-CSV format, the 2026 timeline and steps to comply with Art. 28.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile11 min
DORA: The 5 Most Common Mistakes in the ICT Register of Information and How to Avoid Them
After the first complete annual cycle of DORA's ICT Register, we review the five mistakes that generate the most supervisory requests and how to correct them before the 2027 submission.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile14 min