Name

Sofistic

Legal name

SOLUCIONES CUATROOCHENTA, S.A.

Website

https://sofistic.com

Company type

Public

Founded year

2009

Operating status

Operating

Headcount range

101–250 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Attack Surface Management (EASM/CAASM) (HDADAHAC), Identity Threat Detection & Response (ITDR) (HDAEAJAH)

Keywords

• Managed detection and response
• Penetration testing services
• Managed security services
• Offensive security audits
• Threat intelligence solutions

Headquarters

HQ city

Castellón

HQ country

Spain

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. MDR (Managed Detection and Response): Annual subscription-based managed detection and response service providing 24x7 continuous security monitoring, threat detection, and incident response. Pricing based on scope of services, technology licensing, and volume of endpoints/users.
2. Security Audits and Penetration Testing: One-time and project-based security assessment services including pentesting, vulnerability scanning, Red Team exercises, social engineering tests, and specialized audits for various environments (cloud, OT, IoT, blockchain).
3. Managed Security Services: Ongoing managed security services covering vulnerability management, patch management, security device management, compliance advisory, and security training.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Sofistic provides 24x7x365 Managed Detection and Response (MDR) with AI and ML-powered threat detection, threat hunting, and incident response, combined with comprehensive offensive security services (penetration testing and audits for IT infrastructure, web, mobile, OT, IoT, blockchain, ATM, and cloud environments) and managed security services covering endpoint, network, identity, and data protection. Founded in 2009 and operating as the cybersecurity division of Soluciones Cuatroochenta, S.A. (BME Growth listed), the company specializes in financial, healthcare, and critical infrastructure verticals across Spain and Latin America.

Product overview

Sofistic is a cybersecurity company (a Cuatroochenta company, BME Growth listed) providing a comprehensive portfolio of offensive and defensive security services. The offering combines Managed Detection and Response (MDR) as the core 24x7 service with an extensive suite of security audits and penetration tests (IT Infrastructure, Web, Mobile, Red Team, Social Engineering), and managed security services. The company operates a SOC across Spain, Colombia, and Panama with strategic technology integrations including CrowdStrike, Darktrace, Microsoft, Exabeam, Facephi, Netskope, BeyondTrust, and Cleafy.

Differentiator

Problem solved

Functional benefit

Products and services

• Managed Detection and Response (MDR) 24x7x365 MDR service for organizations requiring continuous security monitoring, threat hunting, and immediate incident response with personalized playbooks based on user behavior. Pricing is annual subscription-based, scoped by endpoints, users, and technology licensing.
• Pentest and Security Audits (Pentest y Auditorías) Offensive security audit and penetration testing services for IT infrastructure, web and mobile applications, OT systems, IoT/ATM hardware, blockchain environments, and cloud, with white/gray/black-box approaches and social engineering tests. Offered as project-based professional services engagements.
• Managed Security Services (Seguridad Gestionada) Managed EDR/XDR, NDR, identity management, threat intelligence, brand protection/digital surveillance, and attack surface and vulnerability management for organizations seeking continuous outsourced protection.
• IT Infrastructure Pentesting Penetration testing of IT infrastructure including networks, systems, and policies via internal and external testing methodologies.
• Web Application Pentest Security testing of web applications covering frontend, backend, and communication-layer vulnerabilities through combined automated and manual analysis.
• Mobile Application Pentest (iOS / Android) Penetration testing of mobile applications on iOS and Android platforms, evaluating crypto APIs, local authentication, communications, and reverse-engineering resistance.
• Red Team Attack Simulation Full-scope adversary-emulation exercise that combines reconnaissance, exploitation, lateral movement, privilege escalation, and physical/digital/social attack vectors to test organizational defenses end to end.
• Social Engineering Test Evaluation of human-factor vulnerabilities through phishing, vishing, smishing, baiting, dumpster diving, tailgating, and QRishing test vectors.
• Tabletop Incident Response Exercises Scenario-based incident response plan testing that trains response teams and produces process improvement recommendations.
• Code Security Audit OWASP-based source code review service identifying injection, XSS, CSRF, insecure authentication, and related application security vulnerabilities.
• Cloud Security Assessment Cloud environment security assessment covering access controls, roles, permissions, storage, network configuration, and CIS/PCI/HIPAA compliance.
• OT Infrastructure Security Audit Security audit of industrial control and automation systems, covering OT networks, devices, systems, and operational processes.
• Blockchain and Smart Contract Security Smart contract auditing, Web3 security testing, transparency audits, and real-time blockchain transaction monitoring for organizations operating blockchain workloads.
• Hardware, IoT, and ATM Security Audit Security audit of hardware devices including IoT and ATMs, covering circuit design flaws, insecure communications, firmware weaknesses, and default configuration issues.
• DDoS Denial-of-Service Testing Denial-of-service testing service combining load testing with preventive and reactive measures to validate infrastructure resilience against DDoS attacks.
• WiFi Network Security Audit Wireless network security audit covering device discovery, authentication analysis, encryption testing, and denial-of-service testing.
• Vulnerability Assessment and Management Ongoing vulnerability scanning, penetration testing, and patch management to provide continuous protection of IT infrastructure.
• Identity and Access Management Managed Identity and Access Management offering including robust access controls and single sign-on (SSO) for organizations.
• Security Education and Awareness Security training and phishing simulation programs for employees to raise awareness and reduce human-factor risk.
• Disaster Recovery and Business Continuity Planning Development of incident response plans and recovery testing to ensure operational continuity for organizations.

Quantifiable outcome

• Reduction in false positives through meticulous analysis and verification of vulnerabilities
• +1 more outcomes

Named customers3 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability6 records

Feature4 records

Partnerships

Four partnerships are on record, tiered core.

• CrowdStrikecoreTechnology or IntegrationStrategic technology alliance providing endpoint protection powered by AI and ML. Sofistic offers CrowdStrike Falcon solutions including NGAV, EDR, threat hunting, cloud security, and identity protection.
• DarktracecoreTechnology or IntegrationPlatinum Partner status. AI-powered cybersecurity platform protecting IT networks, industrial control systems, cloud environments, SaaS, email, endpoints, and IoT devices through interconnected Cyber AI Loop.
• MicrosoftcoreTechnology or IntegrationSolutions Partner status providing integrated cybersecurity with Microsoft solutions including Microsoft 365 security consulting. Recognized as leaders in Gartner Magic Quadrant.
• ExabeamcoreTechnology or IntegrationAdvanced SIEM solution providing security log management, behavioral analytics, UEBA, and incident investigation. Combines 4 tools: Log Management, SIEM, Analytics, and Investigation.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• eSentire: Pure-play MDR vendor with 24x7 SOC and financial-services specialization — directly comparable in service architecture, AI-augmented detection approach, and vertical focus.
• ReliaQuest: Enterprise-focused MDR and security operations platform (GreyMatter) competing for large financial-services and healthcare SOC contracts globally — operates at a larger scale but in the same buyer segment.
• Innotec Security: Spanish cybersecurity consultancy providing offensive security, managed security, and incident response across Iberia and Latin America — comparable in size, service portfolio, and target customer profile.
• Telefónica Tech (ElevenPaths): Telefónica's cybersecurity division (incorporating ElevenPaths) operates MDR, SOC, and managed security services across Iberia and Latin America — directly competing with Sofistic for the same Spanish-speaking enterprise and public-sector clients, and similarly leveraging CrowdStrike/Darktrace-class technology stacks.
• S2 Grupo: Spanish cybersecurity firm headquartered in Valencia operating a national SOC, CERT, and MDR offering with similar vertical focus on critical infrastructure and public sector — a direct competitor in the Iberian MSSP market.
• Arctic Wolf: Global pure-play MDR provider delivering 24x7 SOC-as-a-service with a partner-led GTM model that competes head-to-head with Sofistic's MDR proposition, particularly in mid-market and regulated verticals.
• Secureworks: Globally scaled MDR and Taegis XDR platform provider with deep presence in regulated industries (financial, healthcare) — competes for the same enterprise SOC contracts Sofistic targets, particularly with international banks.
• Expel: Cloud-native MDR provider with transparent pricing and partner-channel GTM — competes for the same mid-market and regulated-vertical MDR contracts as Sofistic.

Broad incumbents

• CrowdStrike: CrowdStrike's Falcon Complete MDR offering bundles endpoint-to-identity managed detection directly — competing with Sofistic's MDR service while simultaneously serving as Sofistic's core endpoint technology partner, creating a dual competitor/partner dynamic.
• Darktrace: Darktrace's own MDR and Managed Security Services for its Cyber AI platform directly overlap with Sofistic's MDR offering; Sofistic is a Platinum Partner, creating the same competitor-and-partner dynamic.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/sofistic
• LinkedInlinkedin.com/company/sofistic-cybersecurity

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sofistic