I need cybersecurity leadership
Cybersecurity strategy, governance and leadership that turn technical and regulatory risks into executive decisions.
Solutions
Choose the entry point that best fits your situation.
From an initial assessment to a comprehensive cybersecurity, resilience and compliance programme. You don't need to buy a tool: you need to know which risk to reduce, which capability to build and how to prove it.
Solutions by need
Eight entry points, one model.
I need to comply with regulations
We turn regulation, continuity and AI governance into controls, owners, processes and verifiable evidence, with functionally segregated review.
I need to protect my operations
Operations, monitoring, response and technological resilience to protect critical assets 24/7.
I need to reduce exposure
We discover, prioritise and close the attack surface before an adversary finds it.
I need resilience and continuity
Backup, recovery, high availability and business continuity so that an incident does not bring the organisation to a halt.
I need to protect a digital product
Product Security, PSIRT, SBOM, AppSec and Cyber Resilience Act for software vendors, SaaS and connected product manufacturers.
I need to protect key people
Discreet, continuous digital protection focused on real risk for executives, business families and public figures.
I need to manage and harden mobile devices
Management, hardening, VPN and encryption for mobile fleets with Samsung SDS EMM On-Prem, deployed and operated by Bomontec.
Free self-assessment
Where does your organisation stand?
Eight questions, two minutes. You will get a view of your maturity level and the proposal that fits best. No data is sent until you decide.
- No sign-up or email: the result is calculated in your browser.
- Guidance on the proposal that fits you best.
- If you wish, send the result with your request in one click.
Indicative only. It does not replace a professional assessment and is not an audit or certification.
Commercial proposals
Flexible, modular and scalable packages.
We select the right delivery model according to your maturity, criticality, exposure, regulation and business goals. Each proposal can be contracted as a monthly service, fixed-scope project, institutional programme or executive retainer.
My situation:
Essential
Basic protection and control
From an initial assessment
Organisations that want to start with managed, prioritised and well-ordered security.
- Initial assessment
- Basic monitoring
- Priority hardening
- Incident management
- Basic executive reporting
- Specialist service desk
Advanced
Security and compliance
Monthly subscription
Companies that need maturity, visibility, compliance and continuous exposure reduction.
- Everything in Essential
- Vulnerability Management
- EDR/XDR or MDR
- IAM/PAM or secure access
- ENS / NIS2 / ISO readiness
- Advanced reporting
Premium
Resilience and continuity
Project + service
Organisations with critical operations, high technology dependence and continuity objectives.
- Everything in Advanced
- Threat Hunting
- Backup / Disaster Recovery
- ISO 22301
- Advanced response
- Operational continuity
- Premium support
Enterprise
Tailored cybersecurity
Custom proposal
Business groups and multinational environments that need coordinated governance, operations and compliance.
- vCISO / CISO Office
- SOC / MDR
- DORA / NIS2 / ENS / ISO
- AI Governance
- Product Security / CRA
- TPRM
- Dedicated architecture and team
Institutional Program
Institutional programme
Scope-based programme
Ministries, public administrations, agencies, critical infrastructure and national or regional programmes.
- Institutional assessment
- Governance and roadmap
- ENS / NIS2 / continuity
- Coordinated operations and response
- Controlled, measurable pilot
- Knowledge transfer
- Executive dashboard
Executive Protection / Private Shield
High-profile private protection
Executive retainer
CEOs, CFOs, board members, business families, public figures, celebrities and exposed individuals.
- Personal and family exposure
- Identity and digital footprint
- Reputation monitoring
- Account and device security
- Confidential response
- Private executive report
Delivery models are indicative. The final scope is defined according to criticality, countries, assets, regulatory requirements, continuity needs and the required service level.
Comparison
Which package fits each situation.
| Situation | Why it matters | Recommended proposal |
|---|---|---|
| I'm starting from scratch or have scattered measures | I need to organise, prioritise and have someone manage security. | Essential |
| I must comply with ENS, NIS2 or ISO 27001 and reduce exposure | Clients, regulators or tenders demand evidence and continuous visibility. | Advanced |
| My operations can't stop | High technology dependence, ransomware and continuity objectives. | Premium |
| Business group or multinational environment | Governance, operations and compliance coordinated across several companies and countries. | Enterprise |
| Public administration, public body or critical infrastructure | Scoped programme with diagnosis, governance, measurable pilot and knowledge transfer. | Institutional Program |
| I'm an executive, business family or public figure | Personal exposure, impersonation and reputation call for discreet protection. | Executive Protection / Private Shield |
Methodology
A clear methodology to turn uncertainty into control.
- 01
Discover
We get to know your business, environment, risks and priorities.
- 02
Analyse
We assess maturity, exposure, compliance and real capabilities.
- 03
Design
We define strategy, roadmap, architecture and action plan.
- 04
Implement
We deliver controls, processes, technology and evidence.
- 05
Operate
We monitor, respond and support continuous improvement.
- 06
Optimise
We measure results, reduce risk and evolve capabilities.
Common questions
Frequently asked questions
Can I combine several packages?
Yes. Delivery models are indicative: the final scope is defined according to criticality, countries, assets, regulatory requirements, continuity needs and the required service level. Combining a monthly service with fixed-scope projects is common.
What does the initial assessment include?
A review of your current situation: assets, exposure, compliance, capabilities and priorities. You receive an initial commercial and technical view with the recommended delivery model.
How is it contracted?
As a monthly service, fixed-scope project, institutional programme or executive retainer. Services are formalised through a proposal, contract and applicable annexes.
Do you work with public administrations?
Yes. The Institutional Program is designed for ministries, public administrations, public bodies, critical infrastructure and national or regional programmes, with diagnosis, governance, coordinated operations, a measurable pilot and knowledge transfer.
Let's talk
Ready to take the first step?
Tell us about your challenges and let's design together the best strategy to protect and strengthen your business.