Solutions

Solutions designed for your organization's most complex security challenges. From supply chain protection to regulatory compliance.

8 vertical solutions7 regulatory frameworks covered4 powered by HodeiShield
7 solutions found

Solutions vs. services: which do you need?

At Hodeitek we work with you in two ways. Solutions combine several cybersecurity services with HodeiShield, our own platform, to address a broader, ongoing business challenge: meeting a regulation such as NIS2, DORA, ENS or ISO 27001, securing an entire supply chain, or sustaining a continuous, sector-specific security program. Services, on the other hand, are specialized, time-bound engagements — audits, penetration testing, GRC consulting, incident response — that resolve one specific offensive, defensive or strategic security need with a defined scope and deliverable. Put simply: a solution is the assembled set built around a regulatory or sector-wide objective; a service is each block that makes it up. If your challenge is broad — complying with a regulation, protecting your entire supply chain, or sustaining an ongoing security posture — explore the solutions on this page. If you already know exactly what you need — a one-off audit, a specific penetration test — check the services instead. Either path reaches the same team and the same standard of work, with no opaque subcontracting.

See all specialized services
See the NIS2 vs ENS vs DORA comparison
By sector

A different approach for your regulatory framework

The same four pillars, applied to the vocabulary and regulation of each vertical.

Industry & OT

NIS2

Manufacturing, energy, and utilities subject to NIS2, with OT networks that can't take IT security templates. The same offensive and defensive team covers IT and OT without breaking industrial operations.

See OT/industrial security

Financial services

DORA

Financial entities and fintechs bound by DORA manage the ICT Register and third-party risk (TPRM) with HodeiShield: compliance measured in weeks, not months.

See DORA compliance

Public sector

ENS

Public administrations and their vendors need ENS certification to bid for tenders. Infrastructure on OVHcloud (EU) and direct access to the people who sign off on the work, no account manager in between.

See ENS certification

SMEs

SOCaaS · MDR

SMEs that need 24/7 monitoring without building their own SOC: SOCaaS/MDR on HodeiShield, our own platform, without a large integrator's cost structure.

See SOCaaS / MDR
FEATUREDNIS2

NIS2 Compliance

Comprehensive guidance to achieve and maintain compliance with the European NIS2 cybersecurity directive.

Explore solution

All our solutions

Each card details the regulatory framework, the target sector and whether HodeiShield is included: pick the solution that matches your organization's challenge.

Broadest regulatory coverage

Third-Party & Supply Chain Risk Management

Assess, monitor, and govern the cybersecurity risk introduced by your vendors, third-party software, and your organization's Nth-party dependencies.

Regulatory framework: NIS2HodeiShield-powered
Learn more

Ransomware Protection and Response

Hodeitek's team are Spanish regulatory specialists as well as ransomware responders: the controls below apply everywhere, and where we reference Spain's National Security Framework (ENS, set by Spain's National Cryptologic Center, CCN) or the EU's DORA regulation, that's Spain- or EU-specific context for organizations operating there or in its regulated sectors. Comprehensive strategy for prevention, early detection, and rapid response to ransomware attacks.

Regulatory framework: NIS2Services + controls
Learn more

Cybersecurity for OT and Industrial Environments

Specialized protection for industrial control systems (ICS), SCADA, PLCs, and operational technology environments.

Regulatory framework: NIS2Services + controls
Learn more

DORA Compliance for Financial Entities

The Digital Operational Resilience Act requires 22,000+ financial entities to actively manage third-party ICT risk since January 2025. HodeiShield automates the Information Register, classifies incidents automatically, and keeps evidence ready for ESA inspection.

Regulatory framework: DORAHodeiShield-powered
Learn more

Spanish National Security Framework for the Public Sector

Hodeitek's team are Spanish regulatory specialists: the National Security Framework (Esquema Nacional de Seguridad, or ENS) is a Spain-only requirement set by Spain's National Cryptologic Center (CCN), not a European or international standard, and it matters if you operate in Spain or sell to its public sector. The ENS is mandatory for all Spanish public administrations and their technology vendors — HodeiShield is the only platform with native ENS, with mapped controls, linked evidence, and automated system profiling.

Regulatory framework: ENSHodeiShield-powered
Learn more

AI Governance & Security (EU AI Act)

Inventory, classify, and govern your AI systems under the EU AI Act, with security controls proportional to each system's risk tier.

Regulatory framework: ISO 27001Services + controls
Learn more

AI-Driven Security Automation

Cut repetitive SOC work with automation and AI: alert triage, context enrichment, and orchestrated response that lower MTTR (mean time to respond) without removing human control.

Regulatory framework: NIS2Services + controls
Learn more

Frequently asked questions about our solutions

What is the difference between a Hodeitek solution and a service?
A solution combines several services with HodeiShield to address a broader, ongoing business challenge, such as meeting a specific regulation continuously. A service is a specialized, time-bound engagement with a defined scope and deliverable.
Which regulatory frameworks do the solutions cover?
We cover NIS2, DORA, ENS and ISO 27001, plus sector solutions such as supply chain protection that don't depend on a single framework.
Do all solutions include HodeiShield?
No. Some solutions are natively powered by HodeiShield; others combine services and controls without the platform. Each solution page states which is the case.
How do I choose the right solution for my organization?
Tell us your challenge and sector through the contact form: we'll propose a concrete plan within 48 hours, with no obligation.

NIS2 vs ENS vs DORA: what sets them apart

The three regulatory frameworks we get asked about most, side by side. Each one has its own page with the full detail.

CriteriaNIS2ENSDORA
What is it?Directive (EU) 2022/2555: cybersecurity for essential and important sectors across the EU.Royal Decree 311/2022: security of the Spanish public sector's information systems.Regulation (EU) 2022/2554: digital operational resilience for the financial sector, applicable since January 2025.
Who does it apply to?Over 160,000 medium and large organizations across 18 essential and important sectors in the EU.Spanish public administrations and any vendor — industrial, financial, or SME — that provides them technology services.Over 22,000 EU financial entities (banking, insurance, fintech, asset managers) and their critical ICT providers.
Categories or regimeEssential entity (proactive supervision) or important entity (reactive supervision after an incident).Three categories — BASIC, MEDIUM, and HIGH — based on impact across five dimensions (availability, authenticity, integrity, confidentiality, and traceability).A single regime for every financial entity, plus an oversight regime for ICT providers deemed critical.
Incident notificationEarly warning within 24h, notification within 72h, and a final report within 1 month of a significant incident.Notification to the CCN-CERT following the body's procedure, proportional to the affected system's category.Initial, intermediate, and final notification on staggered deadlines, per the thresholds in Delegated Regulation (EU) 2024/1774.
Relationship between frameworksSpain's CCN maps ENS to NIS2 through the PCE-NIS2 profile; meeting ENS HIGH covers around 70% of NIS2's requirements.Gets you well ahead on NIS2 and, for financial entities, on much of DORA too, via the CCN's PCE-NIS2.Acts as lex specialis for the financial sector: where DORA applies, it takes precedence over NIS2 for that same entity.
Can more than one regulatory framework apply to me at once?
Yes. A financial entity subject to DORA that also provides technology services to the public sector can also fall within ENS scope; an industrial company obligated under NIS2 that sells to the administration may need ENS to bid on a tender. The three frameworks overlap at critical vendors and at organizations serving several sectors.
If I already comply with ENS, do I have to start from scratch with NIS2?
No. Spain's CCN published the PCE-NIS2 profile, which maps ENS controls to NIS2 requirements: meeting ENS HIGH covers around 70% of NIS2, avoiding the need to manage both frameworks separately.
Does DORA replace NIS2 for financial entities?
In practice, yes, it becomes the reference standard: DORA is lex specialis for the financial sector, so where DORA applies it takes precedence over NIS2 for that entity. NIS2 remains the main entry point for every other essential and important sector.
How long does it take to comply with any of the three?
It depends on your starting point and how many domains, categories, or vendors have gaps. Starting from the initial gap analysis, the control-and-governance implementation program is measured in weeks, not months, thanks to HodeiShield's automation.

Don't see your specific challenge?

We design custom solutions for regulated sectors. Tell us your case and we'll propose a plan in 48 hours.

Book a diagnosis · 48h