Security audit in Móstoles to find out where you stand
We carry out IT security audits through two services: the exposure assessment, which reviews from the outside what an attacker can see of your company, and penetration testing, with controlled, authorised intrusion tests.
Read more Read less
When we finish, you receive a report for management in plain language.
Two ways to review your security
Choose according to what you need to know: what can be seen from the outside or how far an attacker would get. Each page explains what is included, what is not and how we work.
What a security audit is
- A security audit tells you where your company stands and helps you set priorities before deciding what to invest in.
- We carry it out at two levels, depending on the question you need to answer.
Read more Read less
The exposure assessment reviews from the outside your domains, email, services published on the internet, leaked passwords, your Microsoft 365 or Google Workspace configuration and the state of your backups. You receive a report for management and a prioritised plan within 5 working days. It is the starting point for the rest of our services.
Penetration testing consists of controlled, authorised intrusion tests on your website, your applications or your infrastructure, external or internal. It takes 2 to 3 weeks depending on the scope. Each finding is delivered with its evidence, its severity and how to fix it.
- Assessment: the final price depends on the number of domains and users.
- Penetration testing: the price depends on what is included in the test.
- In both cases, the price is fixed in writing before we start.
- The prices we quote do not include VAT (21%).
Who each service is for
The exposure assessment is designed for the management of SMEs with 10 to 250 employees who want to know where they stand before investing in security, or who have received a security questionnaire from a client.
Penetration testing suits companies with a website, an online shop or their own application, and companies that a client, an insurer or an audit has asked for a penetration test. These are some common reasons to call us:
- You do not know which of your company's services are published on the internet or who reviews them.
- You suspect that a company password has appeared in a data leak.
- You are about to launch a new website or application and want to test it first.
- You have changed systems provider and want to know where everything stands.
Reviewing from the outside or running intrusion tests
The assessment observes and reviews configurations: it does not launch attacks or tests that could affect your services, and nothing needs to be installed on your computers.
Active intrusion tests against your systems are not part of it: they are the penetration testing service.
Nor is a penetration test the same as a vulnerability scan.
The scan is an automated review that lists possible flaws.
Read more Read less
In a penetration test, a person checks by hand which of them can really be exploited and how far an attacker would get.
Fixing the flaws is not included in either: it is quoted separately or, in the case of penetration testing, your team can do it.
And no provider can guarantee that a company will never suffer an incident.
Read more Read less
What you take away is an ordered list of what is best to fix first.
Tell us what you want to review
Call us on +34699240879 or email us at hola@oteosecurity.com. The assessment starts with a call to get to know your company and agree the scope.
Read more Read less
Penetration testing starts with a meeting to define what is tested, when and within what limits. Both require written authorisation.
We are available Monday to Friday from 09:00 to 18:00. Our address is Calle Federico Cantero Villamil 2B, 28935 Móstoles. We work remotely anywhere in Spain and on site in the Comunidad de Madrid.