Business Individuals Public sector
Remote IT help Help
Settle a company invoice SWIFT transfer or card payment Public sector: FACe and DIR3 Did this invoice come from us? Invoices and electronic invoicing
Español English
Send an enquiry
Services
Solutions
Prices
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 83 services
IT outsourcing Your IT department, based outside your office and reaching your systems remotely Managed IT support One team for workstations, Microsoft 365 and the server room, billed monthly IT helpdesk Colleagues log a problem from Teams, by mail or on the web portal Service desk A single front door, SLA-driven priorities and a report every month 24/7 IT support Round-the-clock engineers for platforms that cannot pause, Sundays and holidays included Plans: Start, Business, Premium Monthly support from €590 per month + VAT
Support plans and SLA A 4 h, 1 h or 15 min response depending on the plan, written into the contract Systems administration Accounts, hypervisors, file servers and infected PCs handled over a secure remote session IT infrastructure An honest look at what you run today, quicker systems and cloud-hosted desktops Networking and VoIP Checks of the office LAN and firewall, constant watch over links, and calls moved to Teams Cloud and hostingNew Rented VPS or bare metal, shop hosting, object storage and company mailboxes in European data centres Backup and restore Regular test restores, offsite copies and protection that ransomware cannot wipe
GDPR and personal data protection Processing records, processor agreements and technical measures under Spanish law Security policies and documentation Internal rules that hold up in an audit and against ENS or NIS2 Security tooling deployment Choosing the product, rolling it out and tuning its rules Infrastructure security A segmented network, a reviewed firewall and no forgotten open ports Application security Code review and releases that do not open fresh holes Data leak prevention (DLP) You decide which files may leave by email, USB stick or cloud share Database security Least privilege, encryption and a log of who queried what Web application firewall (WAF) A filter in front of your website, PrestaShop store and APIs Access control and endpoint security Two-factor sign-in, Intune and laptops managed end to end VPN and encryption Protected links for home workers and encrypted laptop drives Vulnerability scanning Scheduled scans and a patch list sorted from critical down Antivirus and EDR The attack is spotted and the affected machine is cut off from the network SOC monitoring Logs and alerts reviewed at any hour of the day System hardening Default settings tightened using CIS and CCN-STIC guides Secure use of AI Clear limits on what employees feed into ChatGPT, Gemini or Copilot
Websites and web apps Fifteen services, from a one-page site to a B2B portal, plus SEO, upkeep and clean-up once a site is hacked E-commerce and integrations Your shop wired to Holded or a3ERP, Amazon.es, Redsys and the courier of your choice Bitrix24 and intranet Set-up, migration and licensing of the Bitrix24 workspace Bespoke software Business applications, mobile apps and integrations written around how your company operates Software testing and QA Bugs, bottlenecks and weak spots found before your customers find them
Artificial intelligenceNew Practical AI projects, from picking a use case to coaching the people who will use it Data and analytics Clean records, one reporting database and supplier invoices captured without typing IT consulting and audit Independent second opinion on the IT roadmap and the way your applications connect Digital marketing Tracing each enquiry from first click to signed order, with the CRM doing the follow-up
Software and licences Genuine IDE, monitoring and admin utility subscriptions Training Live online courses for a whole department or for a single learner
Unsure where to begin? We inspect your setup from a distance and send back a written, ranked to-do list Request an IT check
See the 14 solutions
Data in the EU Email, files and applications hosted in data centres in Spain and the EU GDPR compliance Records, contracts and technical measures in order before the AEPD comes asking Remote and hybrid work Safe access to files and software from home, on the road or from another branch Downtime prevention Backups proven by restores, alerting, and a disaster runbook written ahead of time
Retail and e-commerce PrestaShop, Amazon.es, Redsys, Bizum and SEUR joined up in one flow Manufacturing ERP, plant network and servers kept under watch so the line keeps moving Healthcare and clinics Clinic management software, e-prescriptions and properly protected health data Construction Drawings, BIM models and tender documents reachable from site via the cloud Logistics and transport Warehouse software, connected carriers and a depot that keeps running Public institutions ENS, accessibility under RD 1112/2018 and invoices lodged through FACe
Small businesses A well-configured Microsoft 365 and support without hiring an IT person Mid-sized companies A written SLA for your servers, LAN and protection Large enterprises A dedicated team, short response times and regular reporting Multi-branch companies One IT standard across every office, run from a distance
None of these fits? Describe your situation and we will combine only the services you actually need Send an enquiry
About us Who we are and how a fully remote team works Payments How we bill, electronic invoices and when payment is due Contact Write to us, fill in the form or book a video call via Google Meet or Teams
Service · Cybersecurity

Vulnerability scanning

A vulnerability scan can easily produce a two-hundred-page report with four hundred findings, and that report usually sits unread in the IT manager's inbox. The value is not in the scan, which is automated, but in what follows: separating what can really be exploited from what merely sounds alarming, deciding who fixes each item and checking the following month that it was fixed. Our service covers the whole loop. We scan what the internet sees of your company and, through an agent or a remote sensor, what sits inside. We prioritise by whether a flaw is being actively exploited, using INCIBE-CERT advisories and the CISA KEV catalogue as references, and by how exposed each system is. Then we chase every item until it is closed.

Send an enquiry Jump to what is included
Monthly
external and internal scans
KEV and INCIBE-CERT
to rank what is being exploited
A short list
of what is urgent, not 200 pages
Until closed
follow-up on every fix

What falls within the scope of this service

Wherever possible the scan is authenticated: with read-only credentials the tool sees real versions and settings and produces far fewer false positives.

Pin down the details with one of our engineers

External surface

Public IP addresses, domains and subdomains, websites, mail and published services. It is the first thing any attacker sees and the first thing we check.

Internal network

Servers, workstations, printers, NAS boxes, cameras and network devices, scanned from a remote sensor or through agents, with nobody needing to travel.

Web applications

Automated checks on your shop, client portal or e-government site for known flaws, outdated CMS versions and vulnerable modules.

Cloud and Microsoft 365

Risky settings in Azure, AWS or Google Cloud and in your Microsoft 365 tenant: public storage, open network rules and accounts without MFA.

Prioritisation

Each finding is ranked by real-world exploitation, exposure and the value of the system. A critical flaw on an isolated server can wait for the maintenance window; a medium one on an internet-facing firewall cannot.

Patch follow-up

A remediation table with owner and date, and a rescan that confirms closure. Anything that cannot be patched is documented alongside its compensating measure.

How the engagement unfolds, one stage at a time

The first scan is the longest and noisiest. From the second month on, the report focuses on what is new and what is still open.

01

Scope

We agree what is scanned, when and with which credentials, and notify your hosting providers if needed.

02

First scan

Full results and a video call to go through the main findings and agree the order of fixes.

03

Remediation

Your team or Apply's applies the patches and changes according to the plan. Under a support plan, it is done as part of it.

04

Monthly cycle

Scheduled scans, a short report on what has changed and follow-up of open items. An immediate alert if something critical appears between scans.

A CVSS score tells you how bad a flaw could be, not how likely someone is to use it. Many vulnerabilities rated 9 are never exploited, while some rated 7 turn up in every ransomware campaign. That is why we prioritise on what happens in practice, not only on the number in the report.

Common questions

Vulnerability scanning is automated, recurring and broad: it finds known flaws across your whole estate. A penetration test is manual, one-off and deep: a person tries to exploit flaws and chain them together as an attacker would. They complement each other, and the second is covered by our penetration testing service.

It is rare, but some older or industrial devices are sensitive to heavy scanning. We identify them beforehand, scan them with a gentle profile or out of hours, and never run destructive tests. In a plant with PLCs, that part is agreed with the production manager.

Yes. The ENS includes measures on vulnerability management and security configuration, and NIS2 lists vulnerability handling among its risk-management measures. Regular reports and the follow-up table are exactly the evidence an auditor asks for.

We document it and isolate it: its own network segment, access only from the machines that need it, no internet access and closer monitoring. We also put in writing the accepted risk and the plan to retire it. The worst case is an unsupported system nobody knows exists.

Other work we do in this field

Full area overview
Service GDPR and personal data protection Records of processing, permissions, audit trails and 72-hour breach handling Service Security policies and documentation A policy, a risk analysis and procedures people actually follow Service Security tooling deployment Choose, pilot and roll out security tools remotely Service Infrastructure security Perimeter, network segmentation and secure remote access

Find out which vulnerabilities really matter

Tell us what you want checked: websites, servers, internal network or cloud. We will reply with a scope and a date for the first scan.

Hours
Monday to Friday, 9:00-18:00 Spanish time (CET), answers within a working day
Meetings
Video calls via Google Meet or Teams

This site only stores the cookies it needs to work and to remember your chosen city. No advertising or tracking cookies are set. See our privacy policy for the details.