What Derten Cybersecurity does

Derten Cybersecurity (Derten S.A.) is a private Spanish cybersecurity services firm headquartered in Vitoria-Gasteiz with a Bilbao office in the Basque Country. Founded in 2004 and operating for over 20 years in information security, the firm delivers a portfolio of consulting, managed security, and regulatory-compliance services to mid-to-large enterprises and SMEs across Spain, with particular concentration in Basque industrial, automotive, food, biotech, energy, and financial sectors. Its named enterprise customer base exceeds 25 organizations, served through direct field sales and a subsidized SME channel (Kit Consulting and SPRI subsidies).

The company's core service stack combines an in-house Security Operations Center (SOC) with Blue Team capabilities, regulatory-compliance consulting spanning ENS, NIS2, DORA, ISO 27001 and TISAX, and specialized offerings including a DORA compliance pack and AI-usage management consulting. Technology underpinnings rely on a multi-vendor stack: WatchGuard for AI-assisted Network Detection & Response, Arexdata for Data Security Posture Management (DSPM), and Syneto for infrastructure and data-protection services. Notable credentials include Gold Level in Spain's Red Nacional de SOC (January 2025) and ENS High Level certification (July 2025), positioning the firm as an accredited provider for public-sector and critical-infrastructure clients.

Derten generates revenue through a mix of professional services engagements, recurring SOC managed-service contracts, and subsidized advisory work, and is independent and privately held with no disclosed funding rounds or M&A activity. Reported headcount falls in the 11–50 range. Strategic priorities visible in 2024–2025 center on financial-sector expansion (via the ASEAFI collaboration), SME penetration through public funding channels, and the build-out of AI-governance advisory as a new service line.

Name

Derten Cybersecurity

Legal name

Derten S.A.

Website

https://derten.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

Derten Cybersecurity is a Basque Country-based cybersecurity services firm providing SOC managed services, regulatory-compliance consulting (NIS2, DORA, ENS, ISO 27001, TISAX) and AI-governance advisory to mid-to-large enterprises and SMEs across Spain, primarily in industrial and financial sectors.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting & Managed Security Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (56162), Computer Systems Design Services (541512)

SIC

Services-Computer Programming Services (7371), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Cybersecurity & Identity Consulting (BPAHAEAG), Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Cybersecurity consulting services
• Managed security services
• Information security management
• Regulatory compliance advisory
• Security operations monitoring

Headquarters

HQ city

Vitoria-gasteiz

HQ country

Spain

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Professional Cybersecurity Consulting: Core revenue stream from expert consulting engagements including SGSI implementation, NIS2 and DORA compliance advisory, TISAX certification support, and legal and regulatory consulting. Services are sold as project-based or retainer engagements delivered by a multidisciplinary team of consultants, jurists, and technologists.
2. SOC — Security Operations Center Managed Services: Continuous 24/7 monitoring and incident response services provided through Derten's own SOC, sold as recurring managed services contracts. The company achieved Gold Level in the Red Nacional de SOC, validating service quality.
3. Cybersecurity Services (Audits, Training, Hardening, Incident Response): A modular portfolio of cybersecurity services covering security audits, user training and awareness programs, system hardening, and incident response teams. These are sold as standalone services or bundled with managed SOC contracts.
4. Kit Consulting Cybersecurity Advisory Services: Derten acts as an approved advisor under Spain's Kit Consulting program, delivering cybersecurity advisory services to SMEs with subsidies of 6,000 EUR per service tier (Basic, Advanced, Certification Preparation).

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Derten Cybersecurity provides professional cybersecurity consulting and managed security services from the Basque Country, Spain. The company delivers SGSI (Information Security Management System) consulting aligned with ISO 27001, regulatory compliance advisory for NIS2, DORA, TISAX, ENS, and ISO 27001, and operates its own 24/7 Security Operations Center (SOC) with Blue Team capabilities. It also offers security audits, system hardening, incident response, security awareness training, and IT services (cloud, managed services, infrastructure projects).

Product overview

Derten Cybersecurity is a comprehensive cybersecurity and IT services provider offering a modular portfolio of services organized around three pillars: SGSI Consulting (Information Security Management Systems), Cybersecurity Services, and IT Services. The SGSI Consulting pillar includes ISO 27001 advisory, NIS2 compliance, internal audits, training, and AI usage management consulting. The Cybersecurity pillar offers premium security services, training/awareness, audits, system hardening, 24/7 SOC monitoring with Blue Team capabilities, incident response, and legal/normative compliance. The IT Services pillar covers cloud solutions, systems consulting, managed services, infrastructure projects, and business continuity planning. The company also provides specialized advisory packages including Kit Consulting (Basic, Advanced, Certification Preparation) and DORA compliance services.

Differentiator

Problem solved

Functional benefit

Products and services

• Consultoría SGSI (Sistema de Gestión de Seguridad de la Información)

Quantifiable outcome

• More than 80% of cyberattacks occur due to user bad practices, and user awareness training significantly reduces cyber risk for organizations.

Named customers26 records

Segments5 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature5 records

Partnerships

Six partnerships are on record, tiered minor and core.

• TD SYNNEXminorChannel Partner/ Reseller/ Distributor · 15 May 2025TD SYNNEX participated as a technology partner at Derten's Annual Cybersecurity Event 2025.
• OCA GlobalminorImplementation/ SI/ Consulting Partner · 11 February 2025Derten co-hosted a webinar on SGSI implementation and certification (ISO 27001, ENS, NIS2, TISAX, DORA) with OCA Global, a certification and inspection body, to provide practical guidance on achieving cybersecurity certifications.
• SEA Empresas AlavesasminorGTM or Marketing Partner · 10 September 2024Derten co-organized a webinar on SGSI compliance (ISO 27001, TISAX, ENS, DORA, NIS2, 22301) with SEA Empresas Alavesas, targeting their member companies in Álava province.
• ASEAFI (Asociación Española de Asesores Fiscales)coreGTM or Marketing Partner · 30 July 2024Derten entered a collaboration agreement with ASEAFI, the Spanish Association of Tax Advisors, to provide cybersecurity, SGSI implementation, and DORA compliance services to ASEAFI's member financial sector entities. Derten designed a dedicated Pack of Services for DORA compliance adapted to micro-enterprises (µ_DORA) and extended versions for larger financial entities. The partnership includes joint webinars and awareness campaigns.
• Syneto IbéricacoreTechnology or Integration · 26 June 2024Derten entered a strategic association with Syneto, a European company offering a Universal and Resilient Data Management Platform. The partnership enables Derten to offer Syneto's data management and protection technologies to its clients, providing end-to-end solutions for critical applications and enterprise data from Edge to Core to Cloud. Syneto's philosophy is 'Simplify.Accelerate.Protect.' The partnership includes co-marketing initiatives and joint event participation.
• ArexdatacoreTechnology or Integration · 24 June 2024Derten became a certified partner of Arexdata to integrate the Arexdata Data Security Posture Management (DSPM) platform into its SOC operations. This provides unified data visibility, auditing, classification, and protection across all data locations (cloud, on-premise, databases, endpoints), enabling Derten's SOC team to govern data and monitor data-related security events for clients in real time.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Orange Cyberdefense (Spain): European MSSP with SOC operations in Spain, offering managed detection and response and compliance services. Competes with Derten on mid-market and enterprise SOC contracts in the Spanish market.
• Telefónica Tech (Cybersecurity): The cybersecurity arm of Spain's largest telco, offering managed SOC, compliance, and next-gen services to enterprise and public sector. Broad incumbent with substantially larger scale than Derten, competing on SOC and NIS2/DORA mandates.
• Deloitte Spain (Cyber & Strategic Risk): Big Four consulting firm with a major cybersecurity practice in Spain covering NIS2/DORA compliance, GRC, and security transformation. Competes with Derten on larger regulatory compliance and enterprise risk engagements.
• Accenture Spain (Security): Global consulting firm with a dedicated Security practice in Spain covering managed security, identity, and regulatory compliance. Competes with Derten for large enterprise and regulated-industry mandates.
• Indra (Minsait Cybersecurity): Spain's largest IT services group, with Minsait offering SOC, compliance, and cybersecurity services to public administration and large enterprises. Key regional incumbent competing for the same regulatory-driven projects as Derten.

Direct peers

• Cibernos: Spanish IT and cybersecurity services company offering SOC, audits, and compliance consulting. Closely overlaps Derten's SGSI consulting, NIS2/DORA advisory, and managed security service lines in the Spanish market.
• S2 Grupo: Spanish cybersecurity services firm with its own SOC, CERT, and a portfolio highly comparable to Derten's (managed security, compliance consulting, incident response). Both target Spanish enterprises with similar regulatory and SOC offerings.
• Ackcent Cybersecurity: Spain-headquartered cybersecurity services firm offering offensive and defensive security, managed SOC, and consulting. Highly comparable to Derten's protection-detection-response three-pillar model.
• Cipher (Prosegur): Prosegur's cybersecurity MSSP unit delivering managed security, SOC, and compliance services across Spain and Latin America. Direct competitor to Derten in managed SOC and enterprise cybersecurity services.
• MNemo (Grupo MNemo): Spanish cybersecurity services and managed security provider with SOC capabilities and compliance consulting. Comparable to Derten as a Spain-based MSSP serving enterprise clients with regulatory and SOC needs.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/derten
• Xx.com/derten_tech

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Derten Cybersecurity