Cybersecurity for SMEs and businesses
We protect what gets attacked most in a business: the website, email and access. We explain the risk you face, fix it and keep it monitored, with no jargon and a fixed price.
What we see every week in small businesses
A website nobody updates
Old plugins and versions with known flaws. Attacks are automated: they scan for vulnerable sites by the thousands, no matter how small the business is.
Fake emails in your name
Without properly configured email, anyone can send invoices or bank account changes pretending to be your business or your suppliers.
Shared passwords and no backups
The same password for everything, former employees' access still active and no backup outside the server in case something goes wrong.
What we do to protect your business
Website security audit
We review the certificate, security headers, versions, plugins, forms and access, and give you a clear report with what is urgent, what is important and what can wait.
Hacked website recovery
If your site shows strange content, redirects elsewhere or Google flags it as dangerous, we clean it, close the hole the attackers used and ask Google to remove the warning.
Email protected against spoofing
We set up SPF, DKIM and DMARC on your domain so nobody can send email in your name and yours do not end up in spam.
Maintenance and monitoring
Updates, automatic backups stored outside the server and an immediate alert if the site goes down or changes without anyone touching it.
Secure access for your team
Two-step verification, a password manager, per-person permissions and removal of access that should no longer exist.
Customer data and GDPR
Forms, cookies, private areas and documents handled as the law requires: encrypted, with just the right access and without storing data you do not need.
What we check in an audit
The website from outside
SSL certificate, security headers, exposed versions, visible admin paths and forms with no bot protection.
The website from inside
Plugins and dependencies with known flaws, admin users, file permissions and backups that can actually be restored.
Domain and email
SPF, DKIM and DMARC records, domain expiry and who has access to the panel where it is managed.
Your customers' data
What data the site collects, where it is stored, who can see it and whether the legal texts and cookies comply with GDPR.
Security built into the code, and clarity about what we do not do
We are developers: we build websites and applications with security designed into the code, so we know where they usually fail. We focus on what gets attacked most in a small or mid-sized business: the website, email and access. No company can guarantee you will never be attacked, but we can greatly reduce the risk and make sure that, if something happens, you recover quickly. If we find something that needs a specialist (a penetration test, ENS or ISO 27001 certification, or the response to a serious incident), we will tell you and put you in touch with the right people.
How we work, wherever you are
1. Discovery call
A 30-minute video call (or in person if you are near Redondela) about your business, your clients and your goals.
2. Fixed proposal
Scope, timeline and price in writing before we start. No surprises halfway through.
3. Design and build
You get a preview version of the site to review from your phone and comment on anytime.
4. Launch and support
We launch, set up Google Search Console and your Google profile, and stay available for changes.
Frequently asked questions
Is a small business really a target for cyberattacks?
Yes. Most attacks are not aimed at a specific company: they are programs that scan the internet for outdated websites, weak passwords or misconfigured email. A small business usually has fewer defences than a large one, which makes it an easy target.
My website has been hacked, what should I do?
Do not delete anything and contact us as soon as possible. First we change the access passwords and take a copy of the current state, then we clean the site, close the flaw the attackers used and ask Google to remove any dangerous-site warning. If personal data has been affected, we help you assess whether it must be reported to the Spanish Data Protection Agency.
How much does a security audit cost?
It depends on the size of the site and what it covers (just the website, or also email and team access). After a first call we give you a fixed price in writing. Ongoing maintenance is a fixed monthly fee.
Can you guarantee I will not be hacked?
Nobody can honestly guarantee that. What we do is close the most common flaws, monitor the site and keep tested backups, so the risk is much lower and, if something happens, you recover in hours rather than weeks.
Does the EU NIS2 directive affect me?
NIS2 mainly applies to medium and large companies in specific sectors (energy, transport, health, digital, food and others), but those companies also require security measures from their suppliers. If you are not sure whether it affects you, we review it with you and, if a full adaptation is needed, we refer you to a specialist.
Do you train my team to spot fraudulent emails?
Yes. Most attacks start with a deceptive email or message. We have a free data protection and cybersecurity course in our academy and, if you need it, we prepare a hands-on session with real examples for your team.
Do you work with companies outside Galicia?
Yes. We are based in Redondela, but we work 100% online with companies anywhere in Spain: video calls, written reports and support by email or WhatsApp.
Related articles
The impact of inflation on local businesses: why your website is safer than Instagram
Discover how to protect your business from inflation and why relying solely on Instagram puts your company's financial stability at risk.
TechnologyHacking Alert in Burela: Is Your Business Website Safe?
The recent cyberattack on Burela's tourism website proves that no website is safe. We analyze how to protect your business against data theft.
TechnologyWhy WordPress is Costing Businesses in Pontevedra Customers
Software from a decade ago is no longer enough. We analyze WordPress's security, speed, and SEO limitations compared to modern development.
Want to know how well protected your business is?
Tell us your website and what worries you. We reply within 24 business hours with a first assessment and a no-obligation proposal.
Contact us