Offensive cybersecurity · Applied AI · Verifiable results

Cybersecurity and AI for Companies That Demand More

At Hodeitek we work with cybersecurity providers, consultancies and companies with critical operations that need senior technical capacity, proprietary product and real delivery.

Ask about external radar places · 48 h
See the platform

We are opening a passive 48 h diagnosis of your own domain, free and with limited places. First response within 24 business hours.

Technology partners

Bitdefender
Kaspersky
1Password
AWS
OVHcloud
Holded
Our method

How we work

Verifiable facts about how we operate, no marketing comparison tables.

CapabilityHow we do it
  • Delivery modelPentest by our own team, SOC together with a partner
  • Offensive securityRed Team led by an OSCP, OSEP, OSWE, OSWP, CRTE and BSCP-certified pentester
  • SOC / MDR operations24/7 operated 100% in the EU
  • Applied AIAI-native consulting
  • ComplianceNIS2·DORA·ENS with risk quantified in €
  • Own productOwn platform (HodeiShield)
  • Time to startPassive diagnosis in 48 h, limited places
What we do

Advanced Cybersecurity Services

Beyond the traditional MSSP: specialized teams in offensive security, defensive operations, and strategic consulting.

Pentesting & Red Team

We simulate real attacks against your infrastructure, applications, and people. We find vulnerabilities before attackers do.

Every report follows OWASP, PTES and MITRE ATT&CK — not an automated scan rebranded.

Learn more→

AI Security Consulting

We integrate artificial intelligence into your security processes to automate detection, analysis, and incident response: orchestration (SOAR) runs the safe actions and AI/ML models prioritize the rest, with the final decision reviewed by a human analyst.

We assess your AI systems against NIST AI RMF and the EU AI Act, not a generic checklist.

Learn more→

AI & Automation for Business

From use case to production: custom AI agents, process automation, and integrations so your team stops repeating tasks and focuses on what matters.

n8n orchestration self-hosted in the EU: your data never leaves to a third-party SaaS.

Learn more→

Training & Awareness

Awareness and technical training programs to make your team the first line of defense. Phishing simulations and hands-on exercises.

Programs aligned to ENISA, SANS and ISO 27001 A.6.3 — not a generic one-hour talk.

Learn more→

Software & AI for Cybersecurity

We build SaaS products, AI engines, SOC copilots, and security stack integrations for cybersecurity companies that want to accelerate their roadmap.

Built under SSDLC and AI Evals: security is designed in, not audited afterwards.

Learn more→

SOCaaS / MDR

Continuous monitoring and managed detection with expert analysts. Proactive threat hunting powered by AI.

Detection and response referenced against MITRE ATT&CK and NIST 800-61, not ad-hoc rules.

Learn more→
View all services →
Our difference

Why Hodeitek

The four pillars of our differentiator — the same ones on every service, every solution, and every page of this site.

Offensive + defensive + AI

Our own team delivers the pentest and builds the AI models; the SOC is delivered together with a partner. Offensive insight informs defense, correlating every alert with MITRE ATT&CK tactics.

Compliance in weeks, not months

HodeiShield automates continuous assessment, NIS2/DORA/ENS control mapping, and evidence generation, with risk quantified in euros (FAIR methodology).

Sovereignty and proximity

Infrastructure on OVHcloud (France/EU). You speak with the people who sign off on the work, not an account manager who forwards your request elsewhere.

Our own product

HodeiShield isn't a third-party product we resell: we build and operate it ourselves, with visibility into your supply chain down to Nth-party.

Our product

HodeiShield

Supply Chain Cyber Intelligence Platform

Map your entire supply chain and find the link that could take your operation down. The only European TPRM platform with native NIS2, ENS, and DORA. Quantify risk in euros, detect Nth-party dependencies, and correlate every alert with MITRE ATT&CK tactics. Data hosted on OVHcloud (France/EU).

Discover the HodeiShield platformRequest Demo
Native NIS2 + ENS + DORAFAIR Quantification (ALE in €)MITRE ATT&CK MappingNth-party + Cloud Concentration
HodeiShield beta

Try HodeiShield free for 3 months

For MSSP partners and organisations. Access to all modules from 2 November; applications until 31 December 2026. Applying doesn't guarantee a place.

See the beta and applyBeta terms
Cases and results

Real cases, with baseline and method

Two cases with a named client. Each figure states where it started and how it was measured.

Bullhost · Cybersecurity Services Provider (MSSP)

From 45 minutes to under 10 seconds

Bull-Eye: custom-built platform for Bullhost. Combines AI and SOAR on sovereign European infrastructure, reduces MTTD from 45 minutes to under 10 seconds, and is owned and operated by Bullhost.

MTTD45min<10s

radical reduction of mean time to detect

Baseline and method: Baseline: 45 minutes, Bullhost's SOC average MTTD operating manually, logged by the team itself before the deployment. Measurement: automated detection time recorded in production by the Bull-Eye platform after deploying the AI models.

Read the full case
AZK Taldea · Branding & digital marketing agency · Basque Country

Zero defence isn't an option when you sell trust

  • 30+protected endpointsendpoints and identities under 24/7 EDR + MDR with real-time blocking
  • 24/7managed MDRcontinuous detection and response with Bitdefender GravityZone
  • SPRIgrant managedpublic cybersecurity co-funding secured by Hodeitek

Baseline and method: Baseline: 0 endpoints under managed EDR/MDR before the deployment (no managed antivirus). Measurement: device and identity inventory enrolled in the Bitdefender GravityZone console after the deployment.

Read the full case
View all cases
Blog & guides

Intelligence & Resources

Analysis, guides, and resources on cybersecurity, regulatory compliance, and threat intelligence.

Isometric illustration of several mobile devices connected by a network of nodes, with a protective layer covering the older ones, about the security patch for an iPhone zero-day.
Pyme
· 6 min

CoreGraphics zero-day iPhone patch: Apple extends it to older models

Apple extends the CVE-2026-86950 fix to older iPhones and iPads. What is known about the flaw and how to prioritise the update across a company fleet.

Isometric illustration of an SD-WAN network with connected nodes and a compromised central core from which encryption keys are being extracted.
Industria/OT-NIS2
· 7 min

A Cisco SD-WAN Vulnerability to Malware Was Used to Install Malware That Steals Encryption Keys

Cisco Talos describes how UAT-11473 exploited CVE-2026-20127 to install KeyDrift and harvest encryption keys. What it means for the network that links sites and plants.

Abstract isometric illustration of a ledger of linked contract tiles passing through a validation gate into a sealed report package, with ICT provider nodes and a subcontractor chain behind it
Financiero-DORA
· 6 min

DORA register of information software for ICT providers

What a tool should do with the register of information, what DORA covers beyond the register, how to run a gap analysis and what HodeiShield documents.

View all resources →
Common questions

Frequently asked questions

What prospects usually ask before the first call.

What does Hodeitek do?
Hodeitek is a Spanish advanced cybersecurity and artificial intelligence company. We offer pentesting and red team engagements, AI-applied-to-security consulting, secure development, process automation, and regulatory readiness (NIS2, DORA, ENS), plus HodeiShield, our own supply chain intelligence platform. See all services
What certifications and registrations does Hodeitek hold?
Hodeitek holds the ISO 27001 (UNE-EN ISO/IEC 27001:2023, certificate no. 34/5700/26/10159), ENS Medium category (certificate no. 34/5704/26/09103), and Cybersecurity Made in Europe certifications. The ISO/IEC 27001 and ENS certificates are issued by OCA Instituto de Certificación, and the company is listed in the public INCIBE registry. See certifications
Where does Hodeitek operate?
Hodeitek is headquartered in Aretxabaleta (Gipuzkoa, Basque Country, Spain) and serves organizations across the European Union. HodeiShield's data is hosted on OVHcloud infrastructure in France, within the EU, to meet clients' data-sovereignty requirements. Learn about the company
What is HodeiShield and how does it relate to Hodeitek's services?
HodeiShield is Hodeitek's own SaaS platform for managing, controlling, and tracing supply chain risk, with native NIS2, ENS, and DORA compliance. It quantifies risk in euros using FAIR methodology and correlates alerts with MITRE ATT&CK, complementing our consulting and pentesting work with continuous visibility. Discover HodeiShield
How do you get started with Hodeitek?
The first step is to tell us about your challenge (an audit, a regulatory certification, AI applied to security, or supply chain risk) through the contact form. A specialist replies to understand your context and agree on scope and next steps, with no obligation. Talk to a specialist
Which sectors and regulations does Hodeitek cover?
We work with organizations subject to NIS2, DORA, the National Security Framework (ENS), and the EU AI Act, among other frameworks, across sectors such as financial services, industry, technology, and public administration, adapting each engagement to the organization's specific regulatory obligations. See solutions by sector
Next step

Your security needs more than tools

Let's talk about protecting your organization with expert cybersecurity and AI services.

Book a consultation with a SOC analyst or GRC consultantExplore services

24h response · no obligation