BeOneSec

What BeOneSec does

BeOneSec Cybersecurity Solutions, S.L. is a privately held Spanish cybersecurity services firm headquartered in Seville that delivers an integrated five-pillar portfolio organised as Red Team (offensive security, including penetration testing, Red Team as a Service, threat hunting, phishing simulations, and physical intrusion testing aligned with MITRE ATT&CK), Grey Team (OSINT/private-source cyber intelligence and digital forensics), Yellow Team (secure software development using OWASP SAMM and SSDLC maturity models), White Team (governance and compliance under ENS, NIS2, and ISO/IEC 27001 frameworks, using MAGERIT v3 for risk analysis), and Blue Team (defensive services including Active Directory assessment, OT asset discovery, and Managed Detection and Response delivered from an ENS High-certified private cloud). In addition to services, the firm has productised a mass-anonymisation tool called Annonyx (annonyx.com), representing its first standalone software offering beyond consulting.

The company operates a pure direct, consultative enterprise sales motion with no channel partners, resellers, or self-service routes to market. Engagements are packaged with explicit deliverables targeting specific compliance or security objectives, and the Managed Detection and Response subscription is delivered from its own ENS High-certified private cloud to generate recurring revenue on top of project-based professional services. Pricing is bespoke and not publicly disclosed; clients contact the firm via a dedicated email ([email protected]) for proposals. The customer base spans roughly 36 named enterprise and government logos across banking, energy, agriculture, ports, insurance, beverages, entertainment, aerospace, defence, and Andalusian public administration, with the Junta de Andalucía and Ayuntamiento de Sevilla among the public-sector clients.

BeOneSec is the first B Corp certified specialised cybersecurity company in Spain, holds ENS certification, ISO 9001, and ISO/IEC 27001, and is registered with INCIBE. It maintains a strategic Cátedra de Ciberseguridad y Ciberinteligencia jointly with the Universidad de Sevilla for research and talent development, and is an approved Google partner for Google Threat Intelligence. The firm is founder-led, with Fernando Ramos serving as CEO and Carlos Lora Calvo as legal representative, and operates with a remote-first culture from its Seville headquarters.

Name

BeOneSec

Legal name

BeOneSec Cybersecurity Solutions, S.L.

Website

https://beonesec.com

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

BeOneSec is a Seville-headquartered, founder-led Spanish cybersecurity services firm that delivers integrated offensive, intelligence, secure-development, governance, and defensive services under five team brands to Spanish enterprises and public-sector clients, complemented by an Annonyx mass-anonymisation product and MDR from an ENS High-certified private cloud.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Custom Computer Programming Services (541511), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

akta.pro secondary industry

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

Keywords

• Offensive security testing
• Cyber threat intelligence
• Managed detection response
• Security governance compliance
• Secure software development

Headquarters

HQ city

Sevilla

HQ country

Spain

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Professional Cybersecurity Services: BeOneSec generates revenue primarily through professional cybersecurity consulting and managed services. Services include Red Team (pentesting, vulnerability assessments, RTaaS), Grey Team (cyber intelligence), Yellow Team (secure development), White Team (governance/compliance), and Blue Team (defensive services). Engagements are packaged with clear deliverables targeting specific compliance or security objectives. The company also offers an MDR (Managed Detection and Response) as a Service subscription from its ENS High-certified private cloud.
2. Managed Services (MDR): Continuous monitoring, detection, and response services delivered as a managed service from a private cloud, providing ongoing revenue through recurring subscription arrangements.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

BeOneSec sells professional cybersecurity services across five integrated disciplines — Red Team (offensive security, pentesting, RTaaS, threat hunting, phishing, physical intrusion), Grey Team (cyber intelligence and OSINT), Yellow Team (secure software development per OWASP SAMM), White Team (governance, risk and compliance under ENS, NIS2 and ISO/IEC 27001), and Blue Team (defensive security, MDR from an ENS High private cloud, OT security). It also offers MDR as a recurring managed subscription and a standalone product, Annonyx, for mass data anonymization.

Product overview

BeOneSec offers a portfolio of cybersecurity services organized into five team-based offerings: Red Team (offensive security), Gray Team (cyber intelligence), Yellow Team (secure development), White Team (governance and compliance), and Blue Team (defensive security). Additionally, they offer a standalone product called Annonyx for mass anonymization. The company positions these services as a holistic, integrated approach where the teams collaborate to provide comprehensive cybersecurity coverage.

Differentiator

Problem solved

Functional benefit

Brands

• Annonyx: Mass anonymization tool for data protection purposes

Products and services

• Red Team Offensive Security Services Simulated sophisticated and realistic attacks against organisations, including penetration testing (black/grey box, external, internal, OT), vulnerability assessments, Red Team as a Service (Lite and Full), threat hunting, phishing simulations, and physical intrusion scenarios, executed by certified cybersecurity analysts using MITRE ATT&CK-aligned techniques.
• Grey Team Cyber Intelligence Services Collection and analysis of information from public (OSINT) and private sources to provide actionable intelligence on threats, threat actors, TTPs, and vulnerabilities, including digital exposure analysis, information leak analysis, brand monitoring, supplier risk assessments, ad-hoc investigations, incident response intelligence, and digital forensics.
• Yellow Team Secure Software Development Services Integration of security into the software development lifecycle (S-SDLC) using OWASP SAMM maturity models, including S-SDLC maturity assessment, secure development training, definition of security policies and requirements, and secure design and architecture reviews to foster collaboration between development and security teams.
• White Team Governance and Compliance Services Cybersecurity risk assessment using the MAGERIT v3 methodology, alignment with the Esquema Nacional de Seguridad (ENS), NIS2 directive and ISO/IEC 27001 frameworks, policy definition, regulatory compliance services, and security strategy alignment with business objectives.
• Blue Team Defensive Security Services Defensive security services including Active Directory configuration assessment, Managed Detection and Response (MDR) as a Service delivered from an ENS High-certified private cloud, OT asset discovery and inventory, IT/OT segmentation assessment, system hardening, and cybersecurity consulting.
• Annonyx Mass Anonymization A standalone product for mass anonymization of data, available at annonyx.com, used by organisations to anonymise large volumes of data for privacy, compliance, and data-protection purposes.

Quantifiable outcome

• More than 1,000 registered data protection and privacy activities, more than 700 operational resilience interventions, more than 200 regulatory compliance actions, more than 70 digital trust initiatives, and more than 90 cybersecurity culture and maturity programmes delivered as part of B Corp impact reporting.

Named customers38 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature6 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Universidad de SevillacoreStrategic or Co-development PartnerBeOneSec and the Universidad de Sevilla jointly established the Cátedra de Ciberseguridad y Ciberinteligencia BeOneSec, aimed at leading the future of cybersecurity through research, innovation, and talent development. The initiative promotes applied research, knowledge dissemination, professional training, and the creation of real opportunities for emerging talent, democratising access to expertise in cybersecurity.
• Fundación espacio_RESminorStrategic or Co-development PartnerBeOneSec collaborates with Fundación espacio_RES to support early-stage projects and entrepreneurs, ensuring cybersecurity forms part of their growth, value creation, and social impact from the outset. This partnership reflects BeOneSec's commitment to strengthening the broader innovation ecosystem.
• TEDAEminorGTM or Marketing PartnerBeOneSec collaborates with TEDAE (Asociación de Empresas de Tecnología, Defensa y Aeronáutica), a technology, defence, and aerospace industry association in Spain. The collaboration positions BeOneSec within a broader industry network and supports visibility within the sector.
• Google (Google Threat Intelligence)coreTechnology or IntegrationBeOneSec is an approved Google partner for Google Threat Intelligence (GTI), one of the most advanced threat intelligence platforms. The company configures and tailors GTI for clients: workflows, use cases, and integration with existing tools to automate intelligence ingestion and enrichment. GTI also enhances Red Team engagements by providing threat context and risk validation.
• United Nations (Sustainable Development Goals)minorOthersBeOneSec participates in the United Nations Sustainable Development Goals (SDG) initiative as part of its B Corp commitment, aligning its business activities with the global agenda for social and environmental impact.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• NCC Group: UK-based cybersecurity services firm specializing in penetration testing, threat intelligence, and managed detection. Comparable on Red Team/Blue Team methodology and regulated-industry client mix; sets a benchmark for how a regional cyber-services firm can scale internationally.
• Kudelski Security: Swiss-headquartered cybersecurity services firm providing offensive security, managed detection, and governance across Europe. Comparable to BeOneSec on boutique services portfolio and European regulated-industry client base.
• Tarlogic Security: Spanish cybersecurity consultancy specializing in offensive security, pentesting, and cyber intelligence with a similar boutique-services profile. Comparable on team-based methodology and Spanish enterprise/government target market.
• Cipher (Prosegur): Prosegur's cybersecurity division operating as an MSSP across Spain and Latin America, providing managed security, threat intelligence, and incident response. Closely comparable on managed-services model and Iberian/LATAM enterprise footprint.
• S2 Grupo: Valencia-based Spanish cybersecurity services firm offering offensive security, cyber intelligence, managed detection, and governance/compliance. Closely comparable to BeOneSec in service portfolio, Spanish-market focus, and regulated-sector client base.
• InnoTec (Entelgy): Spanish-origin cybersecurity services firm now part of Entelgy, offering offensive and defensive security, compliance, and managed services to Spanish enterprises and public administrations. Direct competitor for the same accounts BeOneSec serves.

Broad incumbents

• Trustwave: Global MSSP offering managed detection, offensive security, and compliance services. Overlaps with BeOneSec's MDR, Red Team, and compliance capabilities and competes for mid-market and enterprise accounts across Europe.
• Telefónica Tech (Cybersecurity): The cybersecurity arm of Telefónica serving Spanish and global enterprises with managed security, SOC, and consulting. Overlaps with BeOneSec's Blue Team/MDR and White Team offerings but at much greater scale and with carrier-grade delivery.
• Accenture Security: Global consulting cybersecurity practice competing for the same Spanish enterprise and government engagements as BeOneSec. Comparable on governance, NIS2/ISO, and managed security offerings, with substantially larger delivery capacity.
• Deloitte (Cyber Risk): Global Big Four cyber practice offering offensive testing, governance, compliance, and managed security to Spanish enterprise and public-sector clients. Competes with BeOneSec for large-account mandates with deeper bench and broader geographic coverage.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/beonesec

Compliance10 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BeOneSec