A2secure

What A2secure does

A2Secure (legal entity Lambda Sec S.L.) is a Spain-based managed cybersecurity services provider founded in 2008 and headquartered in Barcelona with a regional office in Madrid. The firm delivers an integrated portfolio spanning six service pillars: Risk and Strategy (including CISO-as-a-Service and penetration testing), Privacy, AI and Digital Law, PCI DSS compliance, PCI PIN audits, Threat Management (TDIR), and the A2-SOC managed Security Operations Center with 24/7 monitoring and CSIRT-as-a-Service. Underlying technology combines EDR, XDR, SIEM, SOAR (TORQ), and cloud security posture management (Wiz) with proprietary capabilities including the Riskblade third-party risk management platform, an Autonomous Cybersecurity Immune System for vulnerability operations, and an A2 CSRA self-service risk assessment tool. A2Secure holds rare certifications including QSA (PCI DSS), QPA (PCI PIN — one of only 80 firms worldwide), ENS Nivel Alto, ISO 27001, and ISO 9001, and integrates partner technologies from Darktrace, SentinelOne, Qualys, Netskope, Aqua, Acunetix, Flexera, and KnowBe4.

The business model is anchored in annual recurring managed-services revenue from SOC, cybersecurity office deployment, and CSIRT engagements, supplemented by project-based professional services for audits, compliance, and penetration testing, and by specialized PCI PIN assessment fees. Pricing is custom and quote-based, structured per client scope rather than via published tiers. A2Secure targets mid-to-large enterprises and IBEX 35 constituents across Banking/Fintech, Tourism/Hospitality, Biotech, E-commerce, and Retail verticals, with a client base exceeding 200 PCI DSS customers and named logos including eDreams, Cabify, Air Europa, Hotelbeds, RIU Hotels, Iberostar, HIP, Desigual, Afterbanks, Paynopain, Ecopaynet, MONEI, and ChemoTargets. Distribution is direct via enterprise field sales and inside sales from Barcelona and Madrid, with international project delivery across 15+ countries spanning USA and LATAM. The firm was recognized by Gartner as a Representative Vendor in the March 2024 Market Guide for Co-Managed Security Monitoring Services.

Name

A2secure

Legal name

Lambda Sec S.L.

Website

https://a2secure.com

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

101–250 employees

Short description

A2Secure is a Spain-based managed cybersecurity services provider offering SOC, threat management, PCI DSS and PCI PIN compliance, privacy and AI law advisory, and CISO-as-a-Service to mid-to-large enterprises and IBEX 35 companies across banking/fintech, tourism, biotech, and e-commerce.

Ownership category

akta.pro rank

Headquarters

HQ city

Barcelona

HQ country

Spain

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Supply Chain

Revenue model

1. Managed Cybersecurity Services: Ongoing managed security services including SOC operations, threat monitoring, vulnerability management, and cybersecurity office deployment. Clients receive continuous protection, expert personnel, and operational security capabilities without building internal teams. The model reduces client security technology, staffing and operations costs by 24%.
2. Professional Services / Consulting: Advisory and consulting engagements for cybersecurity strategy, risk assessment, compliance (PCI DSS, GDPR, ISO 27001, SWIFT), privacy and digital law, penetration testing, and security audits. Delivered by certified experts (QSA, CISM, CISA, CISSP) with over 15 years of experience.
3. PCI PIN Auditing: Specialized auditing services for PCI PIN compliance, one of only 80 companies worldwide certified as Qualified PIN Assessor (QPA) by PCI Security Standards Council. Provides detailed advisory and specialized audits for financial institutions, merchants, and service providers.
4. Training and Awareness Programs: Cybersecurity awareness training, social engineering awareness, PCI-specific training programs, and secure development lifecycle (S-SDLC) training for developers.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

A2SECURE provides managed cybersecurity services to medium and large enterprises, operating a 24/7 Security Operations Center (A2-SOC) that delivers threat detection, incident response, and CSIRT coordination. Its portfolio spans cyber risk and strategy (including CISO as a Service), PCI DSS compliance advisory and QSA audits, PCI PIN audits as one of only 80 Qualified PIN Assessor firms worldwide, privacy/AI/digital law compliance, and advanced threat management combining EDR, XDR and SIEM technologies.

Product overview

A2SECURE is a managed cybersecurity services provider offering a portfolio of six integrated service pillars: Risk and Strategy, Privacy/AI/Digital Law, PCI DSS Compliance, PCI PIN Audits, Threat Management, and A2-SOC (Security Operations Center). The core offering is built around a 360-degree cybersecurity approach that combines human expertise with technology platforms — including Red Team/Blue Team collaboration, TDIR capabilities, and co-managed SOC services — to serve mid-to-large enterprises, IBEX 35 companies, and sectors including Banking/Fintech, Biotech, E-commerce, and Tourism. The A2-SOC provides 24/7 monitoring while the Risk and Strategy practice delivers CISO-as-a-Service, penetration testing, and security master planning. A self-service Cyber Risk Self-Assessment (A2 CSRA) tool rounds out the portfolio for rapid initial risk evaluation.

Differentiator

Problem solved

Functional benefit

Brands

• A2-SOC: Security Operations Center service providing 24/7 threat detection and containment capabilities.

Products and services

• Riesgos y Estrategia (Risk and Strategy) Comprehensive cybersecurity strategy and risk management practice covering strategic, tactical, and operational levels, including cyber risk assessment, CISO as a Service, Security Master Plan, penetration testing, and social engineering awareness. Targeted at CIOs, CISOs, and DPOs of mid-to-large enterprises.
• Privacidad, IA y Derecho Digital (Privacy, AI and Digital Law) Legal and technical compliance services covering GDPR/LOPD, EU AI Act, DSA/DMA, digital rights, copyright, and AI compliance, including Legal 360 service, DPO services, and privacy/GDPR consulting. Combines legal and technical cybersecurity expertise under one provider.
• Cumplimiento PCI DSS (PCI DSS Compliance) Full PCI DSS certification support including gap assessment, vulnerability scanning, penetration testing, secure development program, cybersecurity awareness, risk analysis, and on-site QSA audits. Delivered by QSAs with more than 7 years of experience.
• Auditorías PCI PIN (PCI PIN Audits) PCI PIN security audits delivered as a Qualified PIN Assessor (QPA) company, evaluating and ensuring secure handling of PINs for financial institutions, merchants, and service providers across payment terminals and ATMs.
• Gestión de Amenazas (Threat Management) Advanced threat detection, investigation, and response (TDIR) covering threat identification, prevention, detection, and response, with Red Team and Blue Team collaboration, leveraging EDR, XDR, and SIEM technologies.
• A2-SOC 24/7 Security Operations Center providing continuous threat monitoring, threat detection, incident containment, CSIRT as a Service, and co-managed security monitoring services across three service tiers. ENS Nivel Alto, ISO 9001, and ISO 27001 certified, and member of the National SOC Network.
• Riskblade Third-party risk management platform for centralizing, automating, and tracking digital supply chain risk, eliminating blind spots in modern enterprise risk management for clients of A2SECURE.
• A2 CSRA (Cyber Risk Self-Assessment) Self-service cyber risk assessment tool that allows small and medium enterprises to evaluate their cybersecurity posture across identification, protection, detection, response, and recovery controls in approximately 3 minutes, based on recognized security standards.
• AI Security & Governance Services AI governance and security service including AI system audits, secure architecture design, risk evaluation triage, and deployment of TRiSM (Trust, Risk, Security Management) technical safeguards aligned with the EU AI Act and Digital Omnibus requirements.

Quantifiable outcome

• 24% reduction in security technology, staffing and operations costs
• +5 more outcomes

Named customers25 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability4 records

Feature5 records

Partnerships

Ten partnerships are on record, tiered core and supporting.

• Knowbe4coreTechnology or IntegrationKnowbe4 is a security awareness training platform providing cybersecurity, GDPR/RGPD, HIPAA, ISO27001 training and generation of social engineering attack simulations (phishing, vishing, USB attacks). A2SECURE integrates Knowbe4 into its awareness and training service offerings for clients.
• SentinelOnecoreTechnology or IntegrationSentinelOne is a next-generation antivirus platform that prevents advanced malware attacks and can recover systems to their initial state along with all important data. A2SECURE incorporates SentinelOne into its endpoint protection offerings.
• QualyscoreTechnology or IntegrationQualys is a leader in vulnerability management and IT security compliance solutions, providing cloud security, compliance, and related services. A2SECURE uses Qualys for vulnerability scanning and compliance management as part of its managed security services.
• AcunetixsupportingTechnology or IntegrationAcunetix is an automated web application security tool capable of scanning any website, quickly finding and fixing vulnerabilities that put web applications at risk. Used for penetration testing and vulnerability assessment services.
• DarktracecoreTechnology or IntegrationDarktrace provides autonomous threat detection and fights emerging cyber threats, protecting corporate networks, virtual environments, IoT, and industrial control systems. Integrated into A2SECURE's threat detection and response capabilities.
• AquasupportingTechnology or IntegrationAqua provides complete visibility into container activity, enabling organizations to detect and prevent attacks and suspicious activities while providing automated security and compliance support. Used for container security and Docker image vulnerability scanning.
• NetskopesupportingTechnology or IntegrationNetskope provides cloud security technology offering a modern cloud security strategy with unified capabilities for data and threat protection, as well as secure private access. Integrated into cloud security service offerings.
• FlexerasupportingTechnology or IntegrationFlexera is a software asset management and cloud management IT company, enabling organizations to maximize the value of technology in their business evolution. Used for IT asset management and cloud governance services.
• WizcoreTechnology or IntegrationWiz is a cloud security platform providing visibility and proactive risk management. A2SECURE uses Wiz for cloud security posture management, enabling proactive risk management and reducing MTTR in complex hybrid environments.
• TORQcoreTechnology or IntegrationTORQ is a Security Orchestration, Automation and Response (SOAR) platform. A2SECURE uses TORQ for security orchestration and automated response capabilities, enabling proactive risk management and reducing noise in complex hybrid environments.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• S2 Grupo: Spanish MSSP and cybersecurity services provider offering SOC, managed security, and PCI DSS advisory. Closely comparable to A2Secure in size, geography (Spain HQ), and service portfolio across enterprise and public-sector clients.
• InnoTec System (NTT DATA): Spanish cybersecurity firm acquired by NTT DATA, offering SOC, ethical hacking, and managed security services. Direct competitor to A2Secure in Spanish enterprise and public-sector markets, with similar service pillars.
• Entelgy Innotec Security: Spain-based cybersecurity services firm within the Entelgy group providing SOC, threat intelligence, and compliance services. Comparable to A2Secure in MSSP positioning, regulatory focus, and Iberian enterprise customer base.

Broad incumbents

• Cipher (Prosegur): Prosegur-owned managed cybersecurity services provider with strong LATAM presence and global SOC capabilities. Comparable to A2Secure in MSSP positioning, with overlapping focus on payments, retail, and financial services in Spanish-speaking markets.
• Deloitte Spain (Cyber Risk): Deloitte's Spanish cybersecurity practice offers risk advisory, compliance, and managed security services to large enterprises. Comparable to A2Secure as a competing provider of PCI DSS, NIS2, and DORA advisory work for enterprise clients.
• Telefónica Tech (Cybersecurity): The cybersecurity arm of Telefónica providing managed SOC, MDR, and compliance services across Spain and LATAM. Comparable to A2Secure in offering set but operates at much greater scale as a tier-1 incumbent within a global telco.
• Accenture Security (Iberia): Global Big Four-adjacent cybersecurity consulting and managed services practice with a significant Iberian presence. Competes with A2Secure for large-enterprise and IBEX 35 cybersecurity outsourcing and compliance engagements.
• Capgemini Engineering (Cybersecurity, Spain): Global IT services firm with cybersecurity practices serving Spanish enterprises. Comparable as a broad incumbent offering integrated security and digital transformation work that overlaps with A2Secure's enterprise customer set.

Regional players

• Ackcent Cybersecurity: Spain-headquartered MSSP with a 24/7 SOC delivering managed detection, response, and threat intelligence services to European clients. Closely comparable to A2Secure's A2-SOC offering, though with greater emphasis on MDR than compliance.

Emerging players

• SecurityScorecard: Cybersecurity ratings and third-party risk management platform. Comparable to A2Secure's use of the Riskblade platform for supply-chain risk — represents an emerging software-led competitor in the same TPRM category A2Secure services.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/a2secure

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about A2secure