Skip to main content
Offensive cybersecurity · Applied AI · Verifiable results

Cybersecurity and AI for Companies That Demand More

At Hodeitek we work with cybersecurity providers, consultancies and companies with critical operations that need senior technical capacity, proprietary product and real delivery. No intermediaries.

A 2-minute form, no bots. First response within 24 business hours; full exposure assessment within 48h.

Technology partners

Bitdefender
Kaspersky
1Password
AWS
OVHcloud
Holded
Our method

How we work

Verifiable facts about how we operate, no marketing comparison tables.

CapabilityHow we do it
  • Delivery modelSenior in-house team, no intermediaries
  • Offensive securityRed Team led by an OSCP, OSEP, OSWE, OSWP, CRTE and BSCP-certified pentester
  • SOC / MDR operations24/7 operated 100% in the EU
  • Applied AIAI-native consulting
  • ComplianceNIS2·DORA·ENS with risk quantified in €
  • Own productOwn platform (HodeiShield)
  • Time to startTriage + roadmap in 48h
What we do

Advanced Cybersecurity Services

Beyond the traditional MSSP: specialized teams in offensive security, defensive operations, and strategic consulting.

Pentesting & Red Team

We simulate real attacks against your infrastructure, applications, and people. We find vulnerabilities before attackers do.

Every report follows OWASP, PTES and MITRE ATT&CK — not an automated scan rebranded.

Learn more→

AI Security Consulting

We integrate artificial intelligence into your security processes to automate detection, analysis, and incident response: orchestration (SOAR) runs the safe actions and AI/ML models prioritize the rest, with the final decision reviewed by a human analyst.

We assess your AI systems against NIST AI RMF and the EU AI Act, not a generic checklist.

Learn more→

AI & Automation for Business

From use case to production: custom AI agents, process automation, and integrations so your team stops repeating tasks and focuses on what matters.

n8n orchestration self-hosted in the EU: your data never leaves to a third-party SaaS.

Learn more→

Training & Awareness

Awareness and technical training programs to make your team the first line of defense. Phishing simulations and hands-on exercises.

Programs aligned to ENISA, SANS and ISO 27001 A.6.3 — not a generic one-hour talk.

Learn more→

Software & AI for Cybersecurity

We build SaaS products, AI engines, SOC copilots, and security stack integrations for cybersecurity companies that want to accelerate their roadmap.

Built under SSDLC and AI Evals: security is designed in, not audited afterwards.

Learn more→

SOCaaS / MDR

Continuous monitoring and managed detection with expert analysts. Proactive threat hunting powered by AI.

Detection and response referenced against MITRE ATT&CK and NIST 800-61, not ad-hoc rules.

Learn more→
Our difference

Why Hodeitek

The four pillars of our differentiator — the same ones on every service, every solution, and every page of this site.

Offensive + defensive + AI

The same team that attacks in the pentest runs the SOC and builds the AI models. Offensive insight informs defense, correlating every alert with MITRE ATT&CK tactics.

Compliance in weeks, not months

HodeiShield automates continuous assessment, NIS2/DORA/ENS control mapping, and evidence generation, with risk quantified in euros (FAIR methodology).

Sovereignty and proximity

Infrastructure on OVHcloud (France/EU). You speak with the people who sign off on the work, not an account manager who forwards your request elsewhere.

Our own product

HodeiShield isn't a third-party product we resell: we build and operate it ourselves, with visibility into your supply chain down to Nth-party.

Our product

HodeiShield

Supply Chain Cyber Intelligence Platform

Map your entire supply chain and find the link that could take your operation down. The only European TPRM platform with native NIS2, ENS, and DORA. Quantify risk in euros, detect Nth-party dependencies, and correlate every alert with MITRE ATT&CK tactics. Data hosted on OVHcloud (France/EU).

Native NIS2 + ENS + DORAFAIR Quantification (ALE in €)MITRE ATT&CK MappingNth-party + Cloud Concentration
Cases & results

Real work in regulated environments

Anonymized for confidentiality: sector, scope, the standard applied (NIS2, DORA, MITRE) and the measurable outcome.

Energy · NIS2 Essential

SPOF identified in 48 h impacting 3 business lines

IBEX 35 energy company. The HodeiShield rollout exposed a shared SaaS provider as a single point of failure in critical operations, documented with a remediation plan prioritized by financial impact.

−98%time vs. manual process
“HodeiShield helped us identify a critical SaaS vendor with a SPOF affecting three business lines. We detected it within 48 hours.”
Security DirectorIBEX 35 energy companyReferences available under NDA
Finance · DORA

DORA ICT register completed in 8 weeks

Tier-1 financial entity with multiple EU subsidiaries. We automated ICT inventory, criticality classification, and RTS reporting with end-to-end traceability for the regulator.

22,000automated RTS fields
Telco · NIS2 Essential

Red Team exposed 4 critical vulnerabilities pre-release

European telco operator. Realistic offensive simulation on the customer platform before go-live: 4 chainable critical vulns identified, exploited in lab, and remediated before production.

0incidents post-remediation (12 months)

Experience across regulated sectors

  • IBEX 35 banking
  • Energy & utilities
  • Telecommunications
  • Industry
  • Insurance
  • Public sector
  • Healthcare
  • Retail
View all cases
Common questions

Frequently asked questions

What prospects usually ask before the first call.

What does Hodeitek do?
Hodeitek is a Spanish advanced cybersecurity and artificial intelligence company. We offer pentesting and red team engagements, AI-applied-to-security consulting, secure development, process automation, and regulatory readiness (NIS2, DORA, ENS), plus HodeiShield, our own supply chain intelligence platform. See all services
What certifications and registrations does Hodeitek hold?
Hodeitek holds the ISO 27001, ENS Medium category, and Cybersecurity Made in Europe certifications and is listed in the public INCIBE registry. See certifications
Where does Hodeitek operate?
Hodeitek is headquartered in Aretxabaleta (Gipuzkoa, Basque Country, Spain) and serves organizations across the European Union. HodeiShield's data is hosted on OVHcloud infrastructure in France, within the EU, to meet clients' data-sovereignty requirements. Learn about the company
What is HodeiShield and how does it relate to Hodeitek's services?
HodeiShield is Hodeitek's own SaaS platform for managing, controlling, and tracing supply chain risk, with native NIS2, ENS, and DORA compliance. It quantifies risk in euros using FAIR methodology and correlates alerts with MITRE ATT&CK, complementing our consulting and pentesting work with continuous visibility. Discover HodeiShield
How do you get started with Hodeitek?
The first step is to tell us about your challenge (an audit, a regulatory certification, AI applied to security, or supply chain risk) through the contact form. A specialist replies to understand your context and agree on scope and next steps, with no obligation. Talk to a specialist
Which sectors and regulations does Hodeitek cover?
We work with organizations subject to NIS2, DORA, the National Security Framework (ENS), and the EU AI Act, among other frameworks, across sectors such as financial services, industry, technology, and public administration, adapting each engagement to the organization's specific regulatory obligations. See solutions by sector
Next step

Your security needs more than tools

Let's talk about protecting your organization with expert cybersecurity and AI services.

24h response · no obligation