ES Consulting

What ES Consulting does

ES Consulting is a privately held cybersecurity consulting firm founded in 2004 and headquartered in Guatemala City, Guatemala. The firm operates across seven countries in Central America, the Caribbean, and the United States, delivering a 360-degree cybersecurity offering built on four core service lines (Consulting, Auditing, Managed Security Services, and Training) and twelve specialized product modules covering perimeter protection, DNS security, anti-DDoS, web filtering, advanced detection and response, CASB/SASE/Zero Trust, cloud security, anti-malware/anti-ransomware, access and privilege management, application security, cyber threat intelligence, and GRC. Underlying capabilities are delivered through a 20+ vendor technology ecosystem (Darktrace, Cloudflare, Check Point, Fortinet, Cisco, Microsoft Azure, AWS, BeyondTrust, Infoblox, Elastic, KnowBe4, and others) and are supported by a team of 50+ certified professionals holding 200+ global certifications including ISO 27001/9001/27032/20000-1 Lead Auditor, CISA, CISM, and CEH.

The firm monetizes primarily through custom-quoted, multi-year professional services engagements and managed security service contracts, supplemented by resale and implementation of third-party cybersecurity products on subscription or licensing terms. Pricing is not publicly disclosed; engagements are scoped against frameworks such as ISO 27001, NIST CSF, CMMI, SWIFT CSP, and PCI DSS. The go-to-market is enterprise-focused and event-driven, with demand generation concentrated at regional conferences and banking association forums in Guatemala, Panama, and across Latin America.

ES Consulting targets nine verticals, with Banking and Finance and Fintech flagged as primary (emphasizing SWIFT CSP implementation, payment fraud prevention, and digital asset security) and Telecommunications, Energy and Utilities, Manufacturing, NGOs, Retail and eCommerce, Education, and Healthcare as secondary. Named customers include Banco Promérica, Tigo, Liberty, Universidad Galileo, and the Cámara de Finanzas de Guatemala as a strategic alliance. The firm claims 150+ active clients, $50M in customer losses avoided, a sub-five-minute threat response time, and a 95% customer satisfaction rate, though no revenue or ARR figures are disclosed and no external funding rounds are on record.

Name

ES Consulting

Legal name

ES Consulting

Website

https://es.consulting

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

ES Consulting is a Guatemala-based cybersecurity consulting firm serving banks, fintechs, and enterprises across seven Central American, Caribbean, and US offices with consulting, managed security services, audits, training, and 12 product modules.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting & Managed Security Services

NAICS

Management Consulting Services (54161), Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Management Consulting Services (8742), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Security Governance, Risk & Compliance (GRC) Advisory (BPAKADAG)

akta.pro secondary industries

Enterprise Security Strategy & Program Advisory (BPAKADAA), Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ), Security Operations (SOC), Incident Response & Threat Hunting (EDAOAIAI)

Keywords

• Cybersecurity consulting
• Managed security services
• Penetration testing
• Compliance advisory
• Security awareness training

Headquarters

HQ city

Guatemala City

HQ country

Guatemala

HQ region

Latin America

Offices7 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Cybersecurity Consulting Services: Strategic advisory services including security roadmaps, architecture design, GRC implementation, and compliance frameworks (ISO, NIST)
2. Managed Security Services (MSSP): Continuous outsourced security operations including 24/7 SOC monitoring, threat detection, automated response, and vulnerability management
3. Security Auditing Services: Technical evaluations including penetration testing, vulnerability analysis, social engineering tests, and compliance audits
4. Training and Capacity Building: Specialized cybersecurity training programs, certifications, and incident simulation exercises
5. Security Products and Solutions: Sale and implementation of cybersecurity products including perimeter protection, DNS security, anti-DDoS, web filtering, CASB/SASE/Zero Trust, cloud security, and threat intelligence

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels6 records

Core offering

ES Consulting provides end-to-end cybersecurity services to mid-to-large enterprises across Latin America, spanning strategic consulting (security roadmaps, GRC, compliance with ISO, NIST, SWIFT CSP), technical auditing (penetration testing, vulnerability analysis, social engineering), managed security services (24/7 SOC monitoring, threat detection and response, vulnerability management), and specialized training (from employee awareness to PECB and Offensive Security certifications). Complementing the services, the firm implements and supports twelve cybersecurity technology modules covering perimeter defense, DNS and anti-DDoS protection, CASB/SASE/Zero Trust, cloud security, anti-malware/anti-ransomware, identity and access management, application security, threat intelligence, and GRC platforms.

Product overview

ES Consulting offers a comprehensive cybersecurity portfolio consisting of 12 specialized security products/modules and 4 core service offerings. The product portfolio includes perimeter protection, DNS security, anti-DDoS protection, web filtering, advanced detection and response, CASB/SASE/Zero Trust, cloud cybersecurity, anti-malware/anti-ransomware, access and privilege management, application security, cyber threat intelligence, and GRC solutions. The four core services are Consulting (strategy and compliance), Auditing (technical evaluations), MSSP (managed security services with 24/7 monitoring), and Training (specialized education and certification preparation). These offerings work together as an integrated cybersecurity ecosystem providing end-to-end protection from perimeter defense to incident response and compliance management.

Differentiator

Problem solved

Functional benefit

Products and services

• Consulting (Consultoría) Specialized services designing, planning and executing comprehensive cybersecurity strategy, regulatory compliance and technological resilience for mid-to-large enterprises in regulated industries.
• Auditing (Auditoría) Independent technical evaluations verifying regulatory compliance and simulating advanced attacks to identify and quantify security vulnerabilities for enterprise clients.
• Managed Security Services (MSSP) Continuous outsourced security operations including 24/7 SOC monitoring, threat detection, automated response, and vulnerability management for enterprise infrastructure.
• Training (Capacitación) Specialized training programs spanning general employee cybersecurity awareness to advanced technical preparation and certifications such as PECB and Offensive Security credentials.
• Perimeter Protection (Protección Perimetral) Establishes and maintains network-boundary defenses using next-generation firewalls, intrusion prevention systems, web and email security gateways, and VPNs for enterprise clients.
• DNS Security (Seguridad de DNS) Protects DNS infrastructure against attacks including DNSSEC, malicious DNS filtering, and protection against cache poisoning and DDoS for enterprise networks.
• Anti-DDoS Protection (Protección Anti DDoS) Mitigates distributed denial-of-service attacks by detecting, analyzing, and filtering traffic to divert malicious requests while maintaining service availability.
• Web Filtering (Filtrado Web) Controls and monitors user web access using predefined categories, blacklists and whitelists, and reputation analysis to block malicious or inappropriate sites.
• Advanced Detection and Response Identifies and neutralizes sophisticated threats using EDR, NDR, and behavioral analysis technologies to continuously monitor endpoints, networks, and cloud environments.
• CASB, SASE and Zero Trust Converges connectivity and security in a single cloud platform (SASE), applies continuous identity verification (Zero Trust), and extends security control to SaaS applications (CASB).
• Cloud Cybersecurity (Ciberseguridad de Nube) Protects data, applications, and infrastructure in public, private, or hybrid cloud environments with workload protection, security management, and compliance tooling.
• Anti-Malware and Anti-Ransomware Provides advanced protection against malware (viruses, trojans, spyware) and ransomware using signature-based detection, behavioral analysis, AI, and machine learning.
• Access and Privilege Management Controls access to systems and data, especially privileged accounts, through user provisioning, authentication, password management, and privileged session monitoring.
• Application Security (Seguridad de Aplicaciones) Protects software throughout its lifecycle through static, dynamic, and interactive security testing, runtime application self-protection (RASP), and DevSecOps integration.
• Cyber Threat Intelligence (Ciber Inteligencia de Amenazas) Collects, processes, and analyzes cyber threat information including TTPs, IOCs, vulnerabilities, and trends to generate actionable intelligence for proactive protection.
• Governance, Risk and Compliance (GRC) Coordinates corporate governance, risk assessment, and regulatory compliance through integrated processes, technology, and personnel to establish security policies.

Quantifiable outcome

• Threat response time under 5 minutes
• +3 more outcomes

Named customers5 records

Segments9 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature4 records

Partnerships

Twelve partnerships are on record, tiered core.

• BeyondTrustcoreTechnology or IntegrationTechnology partnership for Privileged Access Management (PAM) solutions, preventing cyber breaches through elevated permission control and credential protection
• CloudflarecoreTechnology or IntegrationIntegration partner for content delivery network (CDN), DDoS protection, and web security services
• DarktracecoreTechnology or IntegrationAI-powered threat detection and cyber resilience solutions partner for autonomous threat response
• ElasticcoreTechnology or IntegrationAI-based search, observability, and security platform partner for SIEM and log analysis
• Check PointcoreTechnology or IntegrationLeading cybersecurity solutions partner for firewalls and threat prevention
• Microsoft AzurecoreTechnology or IntegrationCloud platform partnership for cloud security implementations and Azure-based solutions
• AWS (Amazon Web Services)coreTechnology or IntegrationCloud computing platform partner for secure cloud migrations and implementations
• KnowBe4coreTechnology or IntegrationSecurity awareness training partner for employee cybersecurity education programs
• InfobloxcoreTechnology or IntegrationNetwork and cybersecurity partner specializing in DDI (DNS, DHCP, IPAM) for hybrid and multi-cloud environments
• FortinetcoreTechnology or IntegrationCybersecurity leader partner for firewall and network security solutions
• CiscocoreTechnology or IntegrationAI, automation, and security technology partner for unified architecture
• ThreatdowncoreTechnology or IntegrationEndpoint and identity threat detection and response partner available 24/7

Scale indicators7 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Cipher Security (Brazil): Cipher is a Latin American MSSP and cybersecurity consulting firm offering managed security, GRC, threat intelligence and incident response — closely comparable to ES Consulting's full-stack MSSP+consulting model. Both target regulated enterprises (especially financial services) in their home regions with similar productized services.
• Tempest Security Intelligence: Brazilian MSSP offering 24/7 SOC, managed detection, offensive security and compliance services to enterprise clients across LATAM. Highly comparable to ES Consulting's four-pillar offering (consulting, auditing, MSSP, training) and serves a similarly regulated clientele.
• Apura Cybersecurity: Colombian-headquartered cybersecurity firm delivering managed security, threat intelligence and consulting across Latin America with multi-country presence. Comparable mid-sized regional player pursuing adjacent LATAM markets with similar service portfolio.

Regional players

• Telefónica Tech (Cybersecurity): Telefónica's cybersecurity division delivers managed security services (SOC), GRC and consulting across Spain and LATAM. While much larger, it competes head-to-head for enterprise banking and telecom security contracts in the same geographies ES Consulting serves, including with MSSP-style offerings.

Emerging players

• Proficua (Mexico): Mexican cybersecurity firm offering consulting, ethical hacking, managed security and compliance services to enterprises in Mexico and selected LATAM markets. Direct overlap on consulting-led cybersecurity for mid-to-large regulated organizations.

Broad incumbents

• Deloitte Cyber (LATAM): Deloitte's global cyber practice offers GRC advisory, managed security and incident response with significant LATAM operations. While operating across many industries and from a much larger base, it competes for the same enterprise banking and telecom security mandates ES Consulting targets.
• Accenture Security (LATAM): Accenture Security provides MSSP, GRC consulting and cyber resilience services globally with established LATAM delivery centers. As a broad incumbent, it competes on enterprise transformation mandates that bundle cybersecurity with broader digital and cloud engagements.
• IBM Security Services: IBM's MSSP and security consulting arm operates globally with managed detection, response and GRC services tied to QRadar and X-Force. Represents the global SI incumbent pressure that ES Consulting faces in enterprise banking, telecom and government tenders across LATAM.
• KPMG Cybersecurity Services (LATAM): KPMG's advisory practice delivers cybersecurity strategy, GRC and ISO certification consulting with substantial LATAM presence (Central America, Mexico, Brazil). Overlaps with ES Consulting on regulatory compliance and audit-led engagements for financial institutions and large enterprises.

Others

• Cloudflare (LATAM Enterprise Security): Cloudflare is a core technology partner of ES Consulting (per the partnerships data) for CDN, DDoS and zero-trust services. Included as a peer because it increasingly sells direct-to-enterprise in LATAM, representing both ecosystem enablement and competitive disintermediation risk for partner-led MSSPs.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/esconsulting__
• Facebookfacebook.com/estrategiayseguridad

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ES Consulting