A European cybersecurity and applied-AI firm that builds its own technology.

Two practices: offensive and defensive security —our own Red Team, a 24/7 SOC delivered together with a partner, NIS2/ENS/DORA compliance— and applied AI and process automation. With our own product, operating in Europe since 2023. This is the dossier: who we are, how we got here, and who we work with.

Meet the team

See partners

Origin & principles

Hodeitek was founded in 2023 in Aretxabaleta, Gipuzkoa, on a simple idea: European cybersecurity needs technical judgment and real sovereignty, not marketing promises. These are the four pillars behind that idea, the same ones on every service and solution on this site.

Offensive + defensive + AI

Our own team delivers the pentest and builds the AI models; the SOC is delivered together with a partner. Red Team and Blue Team, with AI applied where we already operate, not bolted on as an extra layer.

Compliance in weeks, not months

HodeiShield, our own platform, automates continuous assessment and evidence generation for NIS2, DORA, and ENS — manual work no longer sets the pace of compliance.

Sovereignty and proximity

Infrastructure on OVHcloud (France/EU). You speak with the people who sign off on the work, not an account manager who forwards your request elsewhere.

Our own product

We are not integrators: we build and operate HodeiShield ourselves, which is what lets us offer faster compliance and evidence that's always current.

Trajectory

From an offensive consultancy to a European platform. Three moments that mark how we have grown.

2023

October 2023 — Founded

Milestone

Hodeitek founded in Aretxabaleta, Gipuzkoa, and joined ADEGI, the Gipuzkoa business association.

2024

Registered with INCIBE

Milestone

Hodeitek is entered in the register of INCIBE, Spain's National Cybersecurity Institute.

2026

Member of Cybasque and CyberLur

Joined the Basque Country cybersecurity clusters, Cybasque and CyberLur.

2026

Certifications and European seal

Milestone

ISO/IEC 27001 certification (certificate no. 34/5700/26/10159) and ENS Medium category certification (certificate no. 34/5704/26/09103), both from OCA Instituto de Certificación, and the Cybersecurity Made in Europe label obtained through Cybasque.

2026

HodeiShield launch

Milestone

Launch of HodeiShield, our own AI-driven detection and analysis platform, covering NIS2, ENS, and DORA.

How our SOC works

Operating since October 2023, on European infrastructure, with detection never outsourced outside the EU.

Continuous monitoring

EDR/XDR (Bitdefender, Kaspersky) and SIEM/XDR (Sekoia.io) deployed across client systems, with real-time alerting.

Detection engineering

We help our partner create and maintain the detection rules of its SOC (Sigma and YARA), mapped to MITRE ATT&CK.

Triage and response

Every alert is prioritized and answered; noise is filtered out before it reaches the client.

A closed loop with the Red Team

Joint debriefs with the offensive team feed detection with what was learned in every engagement.

How we cover 24/7

The SOC is delivered together with a partner, with shared procedures and escalation paths, so 24/7 coverage never stops and the data stays in the EU.

Technology stack

The platforms and languages we run SOC, Red Team, AI, and product on — no filler names.

Detection and response

Sekoia.io (SIEM / XDR)Bitdefender EDRKaspersky EDRMISPOpenCTIVelociraptorTheHiveCortexSigmaYARA

Offensive

Burp Suite ProNmapNucleiBloodHoundImpacketSliverMythicPythonGo

AI and data

vLLMOllamaLlama / Mistral / QwenHugging FaceLangChainLlamaIndexLiteLLMQdrantRAG / CAGn8nPostgreSQLClickHouse

Product and platform

Next.jsReactTypeScript / NodePrisma

Infrastructure and delivery

KubernetesHelmGitHub ActionsTerraform / OpenTofuCloudflare Zero TrustCloudNativePGRedisOVHcloudAWS

Internal operations

1PasswordHolded

People

A small, senior team: your point of contact is the person leading the work.

Leadership

Gorka Gonzalo

Founder & CEO

Leadership

Raquel Alonso

CFO

Leadership

Gonzalo Gonzalo

COO

Red Team

Jon Velardiez

Lead Pentester

Meet the full team

Proof

What backs every commitment: verifiable certifications, the technologies we work with, and where we have been written about.

Company certifications

OCA Global certification mark: information security, ISO/IEC 27001

HODEITEK, S.L.

Standard: UNE-EN ISO/IEC 27001:2023

Certificate nº 34/5700/26/10159

Issued: 12 October 2026

Valid until: 12 October 2029

View certificate (PDF)

Statement of Applicability v1, 9 July 2026

Information security management system supporting the HodeiShield SaaS service, penetration testing, cybersecurity and ICT consulting, applied AI and process automation.

HODEITEK, S.L. has a management system certified by OCA Global, a management system certification body accredited by ENAC under accreditation no. 08/C-SG057, in accordance with UNE-EN ISO/IEC 27001:2023.

The certification applies to the organisation's information security management system, not to any product or individual service.

Scope per certificate

The information systems supporting the delivery of the HodeiShield SaaS service (supply chain and compliance management, control, and traceability), penetration testing services (technical security auditing), cybersecurity consulting and technical consulting for ICT systems and services, consulting on AI applied to business, and consulting and design for business process automation including the technological infrastructure, technology services, and personnel required for their delivery in accordance with the current Statement of Applicability.

ENS conformity certification, medium category

Certificate nº 34/5704/26/09103

Issued: 17 September 2026

Valid until: 17 September 2028

Check validity View certificate (PDF)

The HodeiShield SaaS service, penetration testing, cybersecurity and ICT consulting, AI applied to business, and process automation design.

Scope per certificate

The information systems supporting the delivery of the HodeiShield SaaS service (supply chain and compliance management, control, and traceability), penetration testing services (technical security auditing), cybersecurity consulting and technical consulting for ICT systems and services, consulting on AI applied to business, and consulting and design for business process automation—including the technological infrastructure, technology services, and personnel required for their delivery—in accordance with the current Statement of Applicability.

Initiated by ECSO. Issued by Cybasque

Team certifications

OSCPOSEPOSWEOSWPCRTEBSCP

Partners

Bitdefender

Kaspersky

1Password

AWS

OVHcloud

Holded

See all partners

Mentions and features

El CorreoBranded contentHodeitek: Innovation and Digital Security at the Service of Basque CompaniesHodeitek: Innovación y seguridad digital al servicio de las empresas vascas2025
SPRI — Gobierno VascoHodeitek Protects Companies from Cybersecurity AttacksHodeitek protege a las empresas de los ataques en ciberseguridad2024

Clear difference

Hodeitek vs. a generalist integrator

No names needed: here's what's different about working with a team 100% specialized in cybersecurity and AI.

AspectGeneralist integratorHodeitek

SpecializationCybersecurity is one line among dozens of services100% specialized in offensive, defensive security and applied AI
Point of contactLayers of account managersDirect access to the founders
SpeedLong onboarding, priority shared with other accountsFree passive diagnosis in 48 h (limited places), exclusive focus on your case

Generalist integrator
Cybersecurity is one line among dozens of services
Hodeitek
100% specialized in offensive, defensive security and applied AI

If your company is in the Basque Country or León, you will find us close by: Cybersecurity for companies in the Basque Country.

Let's talk about your challenge

Tell us what you need to protect. We are opening a passive 48 h diagnosis of your own domain, free and with limited places.

Schedule a call

Response within 24h