Branding & digital marketing agency · Basque Country
End-to-end securing of AZK Taldea, a branding and digital marketing agency: from an environment with no EDR, no firewall and no security culture to enterprise-grade defence across three layers —technical, human and the chain of their clients' websites—, with the SPRI cybersecurity grant managed by Hodeitek.
Agency · 20+ peopleMarch 2026
Three reinforcing layers
Starting point → destination
From zero active defence to enterprise-grade security.
When we arrived, AZK Taldea didn't have a single active layer of defence.
No EDR or managed antivirus
No next-generation firewall
Remote work without a corporate VPN
Secrets and passwords with no management
Teams without security training
The asset of a branding agency is trust: its own and that of every brand it manages. Protecting it isn't optional.
The defence architecture
There is no single door to lock. We deployed security across three surfaces —the technical, the human and the extended chain— and each one reinforces the next: the perimeter contains, people decide, and what AZK hosts for its clients stays inside the same perimeter.
The perimeter and the endpoints
3 controls deployed
Managed detection and response across 30+ endpoints, with real-time threat blocking.
Next-generation firewall with VPN for remote work and secure access to internal servers and storage.
Centralised, encrypted credentials and secrets; the end of shared passwords.
The link attackers aim for
2 controls deployed
Sessions with the teams to give them real security judgement in their daily work.
Real phishing campaigns to measure and reduce the click rate.
The surface almost nobody protects
2 controls deployed
Hosting and infrastructure for AZK's clients' websites, with guaranteed security and performance.
An incident on a hosted website is a reputational incident; we treat it as part of the perimeter.
Public funding
Before installing anything, we managed the SPRI (Basque Government) cybersecurity grant for AZK Taldea. As a direct partner of Bitdefender and Palo Alto —not a reseller— and familiar with Basque public funding, we designed a project the administration co-funded: lower real cost for the client and a faster decision.
Could your project qualify for similar public funding? See open programmesA phased rollout, from the exposure assessment to running the three defence surfaces.
Managing the SPRI grant and assessing the environment: zero active defence.
EDR/MDR Bitdefender GravityZone, Palo Alto NGFW with VPN and 1Password across 30+ endpoints.
Team training and real phishing simulations.
Secure hosting for their clients' websites and 24/7 MDR with real-time detection and blocking.
What was deployed and running, not projections.
protected endpoints
endpoints and identities under 24/7 EDR + MDR with real-time blocking
24/7
managed MDRcontinuous detection and response with Bitdefender GravityZone
3 layers
of defencetechnical, human and the chain of their clients' websites
SPRI
grant managedpublic cybersecurity co-funding secured by Hodeitek
The same business, two opposite security postures.
Starting point
0 active defenceAfter the deployment
Enterprise-gradeWe haven't commissioned an external audit of these figures. Instead, for every metric published above: the starting point (baseline) and how the final figure was obtained.
“We're an agency: we live on our clients' trust and on our own reputation. Hodeitek understood that from day one. We went from having no defence at all to enterprise-grade security —endpoints, people and even our clients' websites— and on top of that they managed the SPRI grant to make it possible. They're the partner you want when security isn't your business, but your reputation depends on it.”
We harden creative agencies and brand studios across three reinforcing surfaces: the endpoint, the people and the extended perimeter. And we help make it viable with public funding. Tell us what you protect and we will design the enterprise grade for your team.
Harden my reputationBull-Eye: custom-built platform for Bullhost. Combines AI and SOAR on sovereign European infrastructure, reduces MTTD from 45 minutes to under 10 seconds, and is owned and operated by Bullhost.
Strategic SOC consultancy since late 2023: from services not yet formalised into a catalogue to a proceduralised MSSP, with workflow automation, a catalogue structured into Blue, Purple and Red teams and a European data-sovereignty focus.
