A European cybersecurity and applied-AI firm that builds its own technology.

Two practices, one senior team: offensive and defensive security —Red Team, 24/7 SOC, NIS2/ENS/DORA compliance— and applied AI and process automation. With our own product, operating in Europe since 2023. This is the dossier: who we are, how we got here, and who we work with.

Meet the team
See partners

Origin & principles

Hodeitek was founded in 2023 in Aretxabaleta, Gipuzkoa, on a simple idea: European cybersecurity needs technical judgment and real sovereignty, not marketing promises. These are the four pillars behind that idea, the same ones on every service and solution on this site.

Offensive + defensive + AI

The same team that attacks in the pentest runs the SOC and builds the AI models. Red Team and Blue Team, with AI applied where we already operate, not bolted on as an extra layer.

Compliance in weeks, not months

HodeiShield, our own platform, automates continuous assessment and evidence generation for NIS2, DORA, and ENS — manual work no longer sets the pace of compliance.

Sovereignty and proximity

Infrastructure on OVHcloud (France/EU). You speak with the people who sign off on the work, not an account manager who forwards your request elsewhere.

Our own product

We are not integrators: we build and operate HodeiShield ourselves, which is what lets us offer faster compliance and evidence that's always current.

Trajectory

From an offensive consultancy to a European platform. Three moments that mark how we have grown.

2023

October 2023 — Founded

Milestone

Hodeitek founded in Aretxabaleta, Gipuzkoa, and joined ADEGI, the Gipuzkoa business association.

2024

Registered with INCIBE

Milestone

Hodeitek is entered in the register of INCIBE, Spain's National Cybersecurity Institute.

2026

Member of Cybasque and CyberLur

Joined the Basque Country cybersecurity clusters, Cybasque and CyberLur.

2026

Certifications and European seal

Milestone

ISO 27001 and ENS Medium category certification (ENS certificate no. 34/5704/26/09103, OCA Instituto de Certificación) and the Cybersecurity Made in Europe label obtained through Cybasque.

2026

HodeiShield launch

Milestone

Launch of HodeiShield, our own AI-driven detection and analysis platform, covering NIS2, ENS, and DORA.

How our SOC works

Operating since October 2023, on European infrastructure, with detection never outsourced outside the EU.

Continuous monitoring

EDR/XDR (Bitdefender, Kaspersky) and SIEM/XDR (Sekoia.io) deployed across client systems, with real-time alerting.

In-house detection

Sigma and YARA rules we write and tune ourselves, mapped to MITRE ATT&CK.

Triage and response

Every alert is prioritized and answered; noise is filtered out before it reaches the client.

A closed loop with the Red Team

Joint debriefs with the offensive team feed detection with what was learned in every engagement.

How we cover 24/7

During business hours the SOC is run by Hodeitek's own team. Outside those hours, monitoring continues with a European partner working to our same procedures and escalation paths, so coverage never stops and the data stays in the EU.

Technology stack

The platforms and languages we run SOC, Red Team, AI, and product on — no filler names.

Detection and response

Sekoia.io (SIEM / XDR)Bitdefender EDRKaspersky EDRMISPOpenCTIVelociraptorTheHiveCortexSigmaYARA

Offensive

Burp Suite ProNmapNucleiBloodHoundImpacketSliverMythicPythonGo

AI and data

vLLMOllamaLlama / Mistral / QwenHugging FaceLangChainLlamaIndexLiteLLMQdrantRAG / CAGn8nPostgreSQLClickHouse

Product and platform

Next.jsReactTypeScript / NodePrisma

Infrastructure and delivery

KubernetesHelmGitHub ActionsTerraform / OpenTofuCloudflare Zero TrustCloudNativePGRedisOVHcloudAWS

Internal operations

1PasswordHolded

People

A small, senior team: your point of contact is the person leading the work.

Gorka Gonzalo, Founder & CEO
Leadership

Gorka Gonzalo

Founder & CEO

Raquel Alonso, CFO
Leadership

Raquel Alonso

CFO

Gonzalo Gonzalo, COO
Leadership

Gonzalo Gonzalo

COO

Jon Velardiez, Lead Pentester
Red Team

Jon Velardiez

Lead Pentester

Meet the full team

Proof

What backs every commitment: verifiable certifications, the technologies we work with, and where we have been written about.

Company certifications

ENS conformity certification, medium category

Certificate nº 34/5704/26/09103

Issued: 17 September 2026

Valid until: 17 September 2028

Check validityView certificate (PDF)

All our cybersecurity, AI, and HodeiShield services.

Scope per certificate

The information systems supporting the delivery of the HodeiShield SaaS service (supply chain and compliance management, control, and traceability), penetration testing services (technical security auditing), cybersecurity consulting and technical consulting for ICT systems and services, consulting on AI applied to business, and consulting and design for business process automation—including the technological infrastructure, technology services, and personnel required for their delivery—in accordance with the current Statement of Applicability.

ISO 27001

Current certification

Cybersecurity Made in Europe label

Initiated by ECSO. Issued by Cybasque

Team certifications

OSCPOSEPOSWEOSWPCRTEBSCP

Partners

Bitdefender
Kaspersky
1Password
AWS
OVHcloud
Holded

Mentions and features

Clear difference

Hodeitek vs. a generalist integrator

No names needed: here's what's different about working with a team 100% specialized in cybersecurity and AI.

  • Generalist integrator

    Cybersecurity is one line among dozens of services

    Hodeitek

    100% specialized in offensive, defensive security and applied AI

Let's talk about your challenge

Tell us what you need to protect and we'll propose a plan within 48 hours.

Schedule a call

Response within 24h