Business Individuals Public sector
Remote IT help Help
Settle a company invoice SWIFT transfer or card payment Public sector: FACe and DIR3 Did this invoice come from us? Invoices and electronic invoicing
Español English
Send an enquiry
Services
Solutions
Prices
Training
About Apply
Contact
Send an enquiry
Browse the catalogue: 83 services
IT outsourcing Your IT department, based outside your office and reaching your systems remotely Managed IT support One team for workstations, Microsoft 365 and the server room, billed monthly IT helpdesk Colleagues log a problem from Teams, by mail or on the web portal Service desk A single front door, SLA-driven priorities and a report every month 24/7 IT support Round-the-clock engineers for platforms that cannot pause, Sundays and holidays included Plans: Start, Business, Premium Monthly support from €590 per month + VAT
Support plans and SLA A 4 h, 1 h or 15 min response depending on the plan, written into the contract Systems administration Accounts, hypervisors, file servers and infected PCs handled over a secure remote session IT infrastructure An honest look at what you run today, quicker systems and cloud-hosted desktops Networking and VoIP Checks of the office LAN and firewall, constant watch over links, and calls moved to Teams Cloud and hostingNew Rented VPS or bare metal, shop hosting, object storage and company mailboxes in European data centres Backup and restore Regular test restores, offsite copies and protection that ransomware cannot wipe
GDPR and personal data protection Processing records, processor agreements and technical measures under Spanish law Security policies and documentation Internal rules that hold up in an audit and against ENS or NIS2 Security tooling deployment Choosing the product, rolling it out and tuning its rules Infrastructure security A segmented network, a reviewed firewall and no forgotten open ports Application security Code review and releases that do not open fresh holes Data leak prevention (DLP) You decide which files may leave by email, USB stick or cloud share Database security Least privilege, encryption and a log of who queried what Web application firewall (WAF) A filter in front of your website, PrestaShop store and APIs Access control and endpoint security Two-factor sign-in, Intune and laptops managed end to end VPN and encryption Protected links for home workers and encrypted laptop drives Vulnerability scanning Scheduled scans and a patch list sorted from critical down Antivirus and EDR The attack is spotted and the affected machine is cut off from the network SOC monitoring Logs and alerts reviewed at any hour of the day System hardening Default settings tightened using CIS and CCN-STIC guides Secure use of AI Clear limits on what employees feed into ChatGPT, Gemini or Copilot
Websites and web apps Fifteen services, from a one-page site to a B2B portal, plus SEO, upkeep and clean-up once a site is hacked E-commerce and integrations Your shop wired to Holded or a3ERP, Amazon.es, Redsys and the courier of your choice Bitrix24 and intranet Set-up, migration and licensing of the Bitrix24 workspace Bespoke software Business applications, mobile apps and integrations written around how your company operates Software testing and QA Bugs, bottlenecks and weak spots found before your customers find them
Artificial intelligenceNew Practical AI projects, from picking a use case to coaching the people who will use it Data and analytics Clean records, one reporting database and supplier invoices captured without typing IT consulting and audit Independent second opinion on the IT roadmap and the way your applications connect Digital marketing Tracing each enquiry from first click to signed order, with the CRM doing the follow-up
Software and licences Genuine IDE, monitoring and admin utility subscriptions Training Live online courses for a whole department or for a single learner
Unsure where to begin? We inspect your setup from a distance and send back a written, ranked to-do list Request an IT check
See the 14 solutions
Data in the EU Email, files and applications hosted in data centres in Spain and the EU GDPR compliance Records, contracts and technical measures in order before the AEPD comes asking Remote and hybrid work Safe access to files and software from home, on the road or from another branch Downtime prevention Backups proven by restores, alerting, and a disaster runbook written ahead of time
Retail and e-commerce PrestaShop, Amazon.es, Redsys, Bizum and SEUR joined up in one flow Manufacturing ERP, plant network and servers kept under watch so the line keeps moving Healthcare and clinics Clinic management software, e-prescriptions and properly protected health data Construction Drawings, BIM models and tender documents reachable from site via the cloud Logistics and transport Warehouse software, connected carriers and a depot that keeps running Public institutions ENS, accessibility under RD 1112/2018 and invoices lodged through FACe
Small businesses A well-configured Microsoft 365 and support without hiring an IT person Mid-sized companies A written SLA for your servers, LAN and protection Large enterprises A dedicated team, short response times and regular reporting Multi-branch companies One IT standard across every office, run from a distance
None of these fits? Describe your situation and we will combine only the services you actually need Send an enquiry
About us Who we are and how a fully remote team works Payments How we bill, electronic invoices and when payment is due Contact Write to us, fill in the form or book a video call via Google Meet or Teams
Service · Websites and web apps

Website recovery

When a site has been hacked, the temptation is to delete whatever looks odd, change the admin password and move on. It almost never works: attackers usually leave several ways back in, some outside the site itself, in FTP, the hosting account or a scheduled task, and they return within days. Take an Alicante estate agency that finds on Monday that its site redirects to a casino, Google lists thousands of Japanese pages under its domain and the host has suspended the account for spamming. Getting it running again is urgent, but so is understanding what happened, or the clean-up only lasts until the following weekend.

Send an enquiry Jump to what is included
Evidence copy
taken before anything is touched
Rebuild
from official components
Blacklists
domain and server checked
Technical report
useful for insurer and AEPD

What falls within the scope of this service

Recovery covers the site, the hosting and the email, because an attack rarely stays in one place. These are the tasks.

Pin down the details with one of our engineers

Containment

A full copy of the infected state, every credential changed, sessions closed and a maintenance page if needed.

Attack analysis

Logs, modification dates, added users and scheduled tasks, vulnerable versions and any possible access to personal data.

Clean rebuild

Core, plugins and theme reinstalled from official sources, the database sanitised and content verified, or a clean backup restored.

Hardening

The vulnerability fixed, abandoned plugins removed, two-factor sign-in and filtering rules placed in front of the site.

Email and reputation

Blacklist checks, delisting requests, SPF, DKIM and DMARC verification and a review request in Google Search Console.

Documentation

A report with timeline, scope and actions taken, useful for deciding on AEPD notification, for the insurer or for a police report.

How the engagement unfolds, one stage at a time

We start as soon as we have access. An information site is usually back the same day; a shop compromised for weeks needs longer.

01

The first hours

A full copy of the current state as evidence, every credential changed and a joint decision on whether the site goes offline or shows a maintenance page.

02

Clean rebuild

Rather than hunting through files one by one, we rebuild the site from official components and verified content, or from an earlier clean backup.

03

Close and harden

The entry point fixed, two-factor sign-in for administrators, hosting and email reviewed, and filtering rules added.

04

Repairing reputation

Review requests in Google Search Console and on blocklists, junk pages removed from the index and a final report on what happened with recommendations.

Email is often the second casualty. A compromised host that sends spam ends up on blacklists, and for days the company's normal email, invoices included, lands in customers' spam folders or never arrives. So alongside the website we check whether the domain and server appear on blocklists, request delisting and verify SPF, DKIM and DMARC.

Common questions

If the attack may have affected personal data and poses a risk to people, the GDPR requires the breach to be notified to the AEPD within 72 hours of becoming aware of it. We provide the technical facts to assess the risk; the decision and notification rest with your company as controller.

That depends on how far the attack reached and the state of your backups. A small information site is often sorted in a few hours; a shop with live orders and no backups takes considerably more. Work is billed at €75 per hour + VAT, with an estimate as soon as the initial diagnosis is done.

Many policies cover recovery and require the incident to be documented. We keep a copy of the infected state and prepare a technical report with dates, scope and actions, which is usually what insurers ask for. Check your policy first in case it names a required supplier.

Yes. You can file a report with the Policía Nacional or the Guardia Civil, and our technical report serves as supporting evidence. INCIBE also offers businesses free guidance on what to do after an incident.

Keep updates current, run few plugins, require two-factor sign-in for administrators, store backups off the server and use monitoring that alerts you before visitors notice. That is exactly what a care plan covers, making it the natural next step after an incident.

Other work we do in this field

Full area overview
Service WordPress websites Your own block theme, a lean plugin list and every account in your name Service Shopify and other platforms Shopify, PrestaShop, WooCommerce or headless, picked on hard numbers Service Simple website and catalogue A few pages plus a product catalogue that asks for quotes, not payment Service Company website Distinct paths for customers, job seekers, suppliers and journalists

Is your site down or hacked?

Tell us what you are seeing and when it started. Include your host and the platform the site runs on so work can begin immediately.

Hours
Monday to Friday, 9:00-18:00 Spanish time (CET), answers within a working day
Meetings
Video calls via Google Meet or Teams

This site only stores the cookies it needs to work and to remember your chosen city. No advertising or tracking cookies are set. See our privacy policy for the details.