Business Individuals Public sector
Remote IT help Help
Settle a company invoice SWIFT transfer or card payment Public sector: FACe and DIR3 Did this invoice come from us? Invoices and electronic invoicing
Español English
Send an enquiry
Services
Solutions
Prices
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 83 services
IT outsourcing Your IT department, based outside your office and reaching your systems remotely Managed IT support One team for workstations, Microsoft 365 and the server room, billed monthly IT helpdesk Colleagues log a problem from Teams, by mail or on the web portal Service desk A single front door, SLA-driven priorities and a report every month 24/7 IT support Round-the-clock engineers for platforms that cannot pause, Sundays and holidays included Plans: Start, Business, Premium Monthly support from €590 per month + VAT
Support plans and SLA A 4 h, 1 h or 15 min response depending on the plan, written into the contract Systems administration Accounts, hypervisors, file servers and infected PCs handled over a secure remote session IT infrastructure An honest look at what you run today, quicker systems and cloud-hosted desktops Networking and VoIP Checks of the office LAN and firewall, constant watch over links, and calls moved to Teams Cloud and hostingNew Rented VPS or bare metal, shop hosting, object storage and company mailboxes in European data centres Backup and restore Regular test restores, offsite copies and protection that ransomware cannot wipe
GDPR and personal data protection Processing records, processor agreements and technical measures under Spanish law Security policies and documentation Internal rules that hold up in an audit and against ENS or NIS2 Security tooling deployment Choosing the product, rolling it out and tuning its rules Infrastructure security A segmented network, a reviewed firewall and no forgotten open ports Application security Code review and releases that do not open fresh holes Data leak prevention (DLP) You decide which files may leave by email, USB stick or cloud share Database security Least privilege, encryption and a log of who queried what Web application firewall (WAF) A filter in front of your website, PrestaShop store and APIs Access control and endpoint security Two-factor sign-in, Intune and laptops managed end to end VPN and encryption Protected links for home workers and encrypted laptop drives Vulnerability scanning Scheduled scans and a patch list sorted from critical down Antivirus and EDR The attack is spotted and the affected machine is cut off from the network SOC monitoring Logs and alerts reviewed at any hour of the day System hardening Default settings tightened using CIS and CCN-STIC guides Secure use of AI Clear limits on what employees feed into ChatGPT, Gemini or Copilot
Websites and web apps Fifteen services, from a one-page site to a B2B portal, plus SEO, upkeep and clean-up once a site is hacked E-commerce and integrations Your shop wired to Holded or a3ERP, Amazon.es, Redsys and the courier of your choice Bitrix24 and intranet Set-up, migration and licensing of the Bitrix24 workspace Bespoke software Business applications, mobile apps and integrations written around how your company operates Software testing and QA Bugs, bottlenecks and weak spots found before your customers find them
Artificial intelligenceNew Practical AI projects, from picking a use case to coaching the people who will use it Data and analytics Clean records, one reporting database and supplier invoices captured without typing IT consulting and audit Independent second opinion on the IT roadmap and the way your applications connect Digital marketing Tracing each enquiry from first click to signed order, with the CRM doing the follow-up
Software and licences Genuine IDE, monitoring and admin utility subscriptions Training Live online courses for a whole department or for a single learner
Unsure where to begin? We inspect your setup from a distance and send back a written, ranked to-do list Request an IT check
See the 14 solutions
Data in the EU Email, files and applications hosted in data centres in Spain and the EU GDPR compliance Records, contracts and technical measures in order before the AEPD comes asking Remote and hybrid work Safe access to files and software from home, on the road or from another branch Downtime prevention Backups proven by restores, alerting, and a disaster runbook written ahead of time
Retail and e-commerce PrestaShop, Amazon.es, Redsys, Bizum and SEUR joined up in one flow Manufacturing ERP, plant network and servers kept under watch so the line keeps moving Healthcare and clinics Clinic management software, e-prescriptions and properly protected health data Construction Drawings, BIM models and tender documents reachable from site via the cloud Logistics and transport Warehouse software, connected carriers and a depot that keeps running Public institutions ENS, accessibility under RD 1112/2018 and invoices lodged through FACe
Small businesses A well-configured Microsoft 365 and support without hiring an IT person Mid-sized companies A written SLA for your servers, LAN and protection Large enterprises A dedicated team, short response times and regular reporting Multi-branch companies One IT standard across every office, run from a distance
None of these fits? Describe your situation and we will combine only the services you actually need Send an enquiry
About us Who we are and how a fully remote team works Payments How we bill, electronic invoices and when payment is due Contact Write to us, fill in the form or book a video call via Google Meet or Teams
Service · Cybersecurity

Web application firewall (WAF)

An online shop gets daily visits from things that are not customers: bots trying passwords on the PrestaShop admin panel, scanners hunting for a vulnerable module, competitors copying the catalogue and prices every hour and, most costly of all, networks using the checkout to test stolen cards against the Redsys payment gateway. Each failed transaction carries a fee and, if it keeps happening, the bank starts asking questions. A web application firewall sits in front of the site and filters that traffic before it reaches the server. We set it up on Cloudflare, AWS WAF, Azure Front Door or a module on your own server, depending on where the site is hosted, and tune it so it stops the bots without getting in the way of shoppers buying on their phones in the middle of the sales.

Send an enquiry Jump to what is included
OWASP Top 10
baseline rules switched on
Admin panel
out of reach for bots
Weeks ahead
of Black Friday and the sales
No change
of hosting or platform

What falls within the scope of this service

A WAF does not fix a vulnerable module, but it buys time to update it and removes most of the automated noise.

Pin down the details with one of our engineers

Baseline rules

Protection against SQL injection, cross-site scripting and known attacks on PrestaShop, WooCommerce, WordPress and Magento, using provider-managed rules that update themselves.

Admin panel

Back office access limited by country, by address or by identity, with a cap on attempts. The admin URL stops being the busiest door on the shop.

Card testing

Rate limits on the basket and checkout, challenges for suspicious sessions and alerts when gateway declines climb. For many shops this is the protection that saves the most money.

Bots and crawlers

We tell legitimate search engines apart from bots that scrape prices or hammer the internal search. The first are let through; the second are slowed down or stopped.

Denial of service

Protection against bursts of malicious traffic at application level, which can take a small shop offline without any huge attack.

Reports

A monthly summary of what was blocked and which false positives were fixed, so you know what the filter is stopping and whether it bothers anyone.

How the engagement unfolds, one stage at a time

Every WAF starts in observation mode. Switching on blocking without knowing your real traffic is the fastest way to lose sales.

01

Review

Platform, hosting, DNS, payment gateway and installed modules. We decide where the filter goes with the smallest possible change.

02

Observation

One or two weeks logging what the WAF would block, to spot legitimate requests that look like attacks, such as a marketplace feed or calls from the ERP.

03

Gradual blocking

Rules are enabled family by family, starting with the safest, and checked daily in the first few days.

04

Ongoing tuning

A monthly review or, under a support plan, continuous follow-up, with particular care before each campaign.

Stolen-card testing shows up on the payment gateway bill before it shows on the website. Hundreds of small declined payments overnight generate fees and bank warnings while the shop carries on as if nothing were wrong. A per-session attempt limit and a bot challenge cut it off before the bank gets in touch.

Common questions

Usually not. Cloud WAFs such as Cloudflare work by changing DNS so traffic passes through them before reaching your current server. If the site runs on AWS or Azure, we use that provider's own service. Your hosting stays the same.

Not if it is configured properly. Legitimate search engine crawlers are recognised and allowed through. A WAF with caching also tends to speed up page loads, which does help rankings.

We identify them during observation: the Amazon.es or PcComponentes feed, calls from Channable or Lengow, ERP synchronisation and notifications from Redsys or Bizum. Each gets a documented exception so none of them breaks.

No. The WAF lowers the risk until the update arrives and holds back automated traffic, but a vulnerable module is still vulnerable. It is one more layer alongside updates, strong back office passwords and backups.

Other work we do in this field

Full area overview
Service GDPR and personal data protection Records of processing, permissions, audit trails and 72-hour breach handling Service Security policies and documentation A policy, a risk analysis and procedures people actually follow Service Security tooling deployment Choose, pilot and roll out security tools remotely Service Infrastructure security Perimeter, network segmentation and secure remote access

Stop the bots before your next campaign

Tell us which platform your shop or site runs on, where it is hosted and which payment gateway you use. We will reply with a setup proposal.

Hours
Monday to Friday, 9:00-18:00 Spanish time (CET), answers within a working day
Meetings
Video calls via Google Meet or Teams

This site only stores the cookies it needs to work and to remember your chosen city. No advertising or tracking cookies are set. See our privacy policy for the details.