Cybersecurity for companies in the Basque Country
Hodeitek is an advanced cybersecurity and AI company headquartered in Aretxabaleta, Gipuzkoa. We help companies find vulnerabilities before attackers do, monitor their systems, and meet the regulations that already apply to them. We serve clients worldwide, mainly in Europe, with our strongest presence in the Basque Country and León.
Who we are and where we are
Hodeitek was founded in October 2023 in Aretxabaleta (Gipuzkoa). Our registered office is at Markole, Aretxabaleta, and we also have a presence in León. We are HODEITEK SL, entered in the Gipuzkoa Commercial Registry. We are part of the Basque cybersecurity ecosystem: members of Cybasque, CyberLur, GAIA, Ajebask Gipuzkoa and ADEGI. We are registered with INCIBE, Spain's National Cybersecurity Institute.
Services for companies
- Pentesting & Red Team: we simulate real attacks on your infrastructure, applications and people to find vulnerabilities before attackers do.
- Managed SOC (SOCaaS / MDR): 24/7/365 monitoring, proactive threat hunting and managed response without building your own SOC.
- GRC & regulatory compliance consulting: ISMS, security master plans and roadmaps for NIS2, ENS, DORA and ISO 27001.
- Cybersecurity training & awareness: phishing simulations and company-wide training with audit-ready evidence.
- AI security consulting and AI & automation for business.
Depending on your sector: OT and industrial cybersecurity (passive asset discovery and segmentation, no downtime), ransomware protection and response, and third-party and supply chain risk management.
Regulation that may apply to you
- NIS2: we determine whether you are in scope (essential or important entity), measure your gap against the 10 Article 21 domains and prioritise a roadmap.
- ENS (Spanish National Security Framework): for the public sector and its suppliers, with system categorisation and tender-ready evidence.
- DORA: for financial entities and their ICT providers.
- AI governance & the EU AI Act: AI system inventory and risk-tier classification.
How we work
Each engagement starts with a clear scope and agreed rules of engagement; deliverables are an executive and a technical report, with remediation verification. We work in Basque, Spanish and English. We work with SPRI, including on Cybersecurity and AI grants: if your project fits, we help with the application and technical justification.
Verifiable credentials
- ENS conformity certification, Medium category, from OCA Instituto de Certificación (ENAC-accredited), no. 34/5704/26/09103. Check it on OCA Global. Scope: all our cybersecurity, AI and HodeiShield services.
- ISO/IEC 27001 certification no. 34/5700/26/10159, also from OCA.
- Cybersecurity Made in Europe label, issued through Cybasque (ECSO).
- INCIBE registration (public catalogue).
- Team certifications: OSCP, OSEP, OSWE, OSWP, CRTE, BSCP.
- Client cases: Bullhost Cloud Services, a Basque Country MSSP, and AZK Taldea.
Talk to us
Tell us about your situation and we will reply with a scoping proposal.