Cyberzaintza

What Cyberzaintza does

Cyberzaintza (Zibersegurtasunaren Euskal Agentzia) is the official Basque Cybersecurity Agency, a public government entity under Eusko Jaurlaritza (Basque Government) headquartered in Vitoria-Gasteiz, Spain. Established in 2017 and operating with approximately 7 employees, the agency functions as the Basque Country's Computer Emergency Response Team (CERT) and serves four primary constituencies: citizens, public administration, business networks and SMEs, and cybersecurity students and professionals. All services are delivered free of charge as a public mandate, including a toll-free incident reporting hotline (900 104 891), email support, the Ziberpedia knowledge base, awareness campaigns, and training programs such as CyberLehia (vocational student competition) and ZiberJendea (educator program).

The agency's core technology and service portfolio spans incident response coordination, regulatory compliance auditing (accredited as the official Technical Audit Body for ENS compliance by CCN-CERT), the Ziberpedia knowledge base covering threats, ransomware, resilience, industrial control systems, and vulnerabilities, and the Zibereguraldia newsletter. It holds affiliations with FIRST, TF-CSIRT, CSIRT.es, ECS, and the Global Cyber Alliance, and coordinates an inter-institutional table of 13 Basque organisms for cybersecurity resilience training. Internationally, Director Javier Diéguez has been re-elected for five consecutive terms to ECSO's Board of Directors representing European regions.

As a non-commercial government agency, Cyberzaintza is funded entirely through Basque Government budget allocations approved by its Administration Council, chaired by Security Minister Bingen Zupiria. The agency earns no commercial revenue and follows no commercial pricing model. Its economic model is that of a public-sector service provider executing government policy, with growth measured in expanded mandate (OAT accreditation, LABI activation procedures, NIS2 directive implementation, Basque Cybersecurity Strategy 2024-2029) rather than in revenue or headcount.

Name

Cyberzaintza

Legal name

Cyberzaintza - Zibersegurtasunaren Euskal Agentzia

Website

https://ciberseguridad.eus

Company type

Private

Founded year

2018

Operating status

Operating

Short description

Cyberzaintza is the Basque Cybersecurity Agency, a public government entity under Eusko Jaurlaritza operating as the Basque Country's CERT, providing free incident response, ENS compliance auditing, awareness campaigns, and training to citizens, businesses, and public administration.

Ownership category

akta.pro rank

Product category

Public Sector Cybersecurity

NAICS

Regulation and Administration of Communications, Electric, Gas, and Other Utilities (92613), National Security (928110)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Audit Management (HDADAIAF)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Cybersecurity Training & Awareness Programs (BPAEANAF), Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)

Keywords

• Cybersecurity incident response
• Public sector auditing
• Cybersecurity awareness training
• National security schema compliance
• Computer emergency response team

Headquarters

HQ city

Miñao/Miñaon

HQ country

Spain

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Public Government Funding: As a Basque Government agency (Eusko Jaurlaritza), Cyberzaintza is funded through public budgets. The 2025 plan was approved by the Administration Council chaired by Security Minister Bingen Zupiria. Revenue is not commercially derived but through government appropriations.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

Cyberzaintza (Basque Cybersecurity Agency) operates as the Basque Country's Computer Emergency Response Team (CERT), providing free incident response services, technical auditing for public administration compliance with Spain's National Security Schema (ENS), and maintains the Ziberpedia cybersecurity knowledge base. The agency also runs awareness campaigns, training programs (ZiberJendea, CyberLehia, CyberErronka), and coordinates inter-institutional response to major cybersecurity events for citizens, businesses, public administration, and cybersecurity professionals.

Product overview

Cyberzaintza (Zibersegurtasunaren Euskal Agentzia / Basque Cybersecurity Agency) is a public government agency, not a commercial product company. The organization operates as a unified cybersecurity services platform providing awareness campaigns (Cyberzaintza zurekin doa, Ziberrean Zibersegurola, CyberErronka), training programs (ZiberJendea, programs for cybersecurity students and professionals), knowledge resources (Ziberpedia knowledge base), incident response services (CERT), talent development competitions (CyberLehia), and regulatory support (Autobabeserako euskal araua, NIS2 directive). Services are tailored for four main audiences: clusters/companies/SMEs, public administration, citizens, and cybersecurity companies/professionals.

Differentiator

Problem solved

Functional benefit

Products and services

• Erantzun teknikoa (CERT)
• Ziberpedia
• ZiberJendea
• CyberErronka
• CyberLehia
• Incident Reporting Service
• ENS Compliance Auditing (OAT)

Quantifiable outcome

• Over 1,100 elderly people trained in cybersecurity in 2025 through Cyberzaintza and KZgune collaboration
• +2 more outcomes

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Ten partnerships are on record, tiered core, minor and flagship.

• CCN-CERT / Kriptologia Zentro Nazionala (National Cryptology Center)coreTechnology or Integration · 8 June 2026CCN-CERT accredited Cyberzaintza as the Technical Audit Organ for Public Sector (OAT) to verify compliance with the National Security Schema (ENS) in Basque public administration. This is a formal governmental accreditation relationship.
• Agència de Ciberseguretat de Catalunya (Catalan Cybersecurity Agency)minorStrategic or Co-development Partner · 23 October 2025Representatives of the Catalan Cybersecurity Agency visited Cyberzaintza's facilities in Miñao to learn about its operations and share experiences in regional cybersecurity coordination.
• Nuevo León Government (Mexico) / UANL / Tecnológico de MonterreyminorStrategic or Co-development Partner · 9 October 2025Representatives from the State Government of Nuevo León, Mexico, along with the Autonomous University of Nuevo León (UANL) and Tecnológico de Monterrey, visited Cyberzaintza's facilities to learn about Basque cybersecurity practices.
• KZguneflagshipStrategic or Co-development Partner · 1 January 2025Cyberzaintza collaborates with KZgune (Basque digital literacy centers) to deliver cybersecurity training to elderly citizens. In 2025, over 1,100 seniors were trained in cybersecurity awareness through this partnership.
• TknikaflagshipStrategic or Co-development Partner · 1 January 2025Cyberzaintza works with Tknika (Basque Vocational Education Innovation Center) to organize CyberLehia, the flagship cybersecurity competition for vocational education students, identifying and nurturing future cybersecurity talent.
• FIRST (Forum of Incident Response and Security Teams)coreTechnology or Integration · 1 January 2025Cyberzaintza's CERT is affiliated with FIRST, the global forum for computer security incident response teams, enabling international collaboration and coordination on cybersecurity incidents.
• TF-CSIRTcoreTechnology or Integration · 1 January 2025Cyberzaintza's CERT is affiliated with TF-CSIRT, the trusted introducer for European CSIRTs, providing trusted coordination among European incident response teams.
• Global Cyber AllianceminorStrategic or Co-development Partner · 1 January 2025Cyberzaintza maintains partnership with the Global Cyber Alliance, an international organization working to reduce cyber risk through collective action.
• European Cyber Security Organisation (ECSO)coreStrategic or Co-development Partner · 14 June 2024Director Javier Diéguez has been re-elected for his fifth consecutive term to ECSO's Board of Directors as the European regions representative, serving on the Strategic Committee. This provides Cyberzaintza with significant influence in European cybersecurity policy and collaboration networks.
• Navarra Cybersecurity Center (NASERTIC)minorStrategic or Co-development Partner · 15 April 2024Cyberzaintza visited the newly established Navarra Cybersecurity Center along with NASERTIC to strengthen cybersecurity relationships and share experiences between neighboring regions.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• INCIBE (Instituto Nacional de Ciberseguridad): Spain's national cybersecurity reference institute, providing CERT services, awareness, training, and enterprise support. It operates at the national level but is functionally comparable to Cyberzaintza across CERT, awareness, and SME cybersecurity enablement, with the key difference being national scope versus Cyberzaintza's regional Basque mandate.
• CCN-CERT (Centro Criptológico Nacional): Spain's national government CERT under the National Cryptology Center, coordinating national-level cyber incident response and accrediting bodies like Cyberzaintza as OAT for ENS compliance. Directly comparable as a CERT and as the parent accreditation framework for Cyberzaintza's audit role.
• ENISA (European Union Agency for Cybersecurity): EU-wide agency supporting member states and EU institutions on cybersecurity, with overlapping mandate in awareness, NIS2 implementation guidance, and CSIRT community coordination. Comparable as the supranational counterpart to Cyberzaintza's regional role and connected via ECSO.

Direct peers

• Agència de Ciberseguretat de Catalunya: Catalonia's regional cybersecurity agency, which has visited Cyberzaintza to study its operating model. Both are autonomous-community-level agencies offering CERT services, awareness, ENS-style compliance support, and inter-institutional coordination to a regional population and public administration.
• NASERTIC (Navarra Cybersecurity Center): Newly established cybersecurity center in Navarra, which Cyberzaintza visited to share experiences. Functionally analogous as a smaller, neighbouring Spanish regional cybersecurity body building CERT and SME support capabilities, making it the closest regional peer in size and stage.

Regional players

• Agencia Digital de Andalucía (ADA): Andalusia's regional digital transformation agency, whose representatives have visited Cyberzaintza. It plays a broader digital role than Cyberzaintza but covers cybersecurity policy, public-sector digital services, and inter-agency coordination within another Spanish autonomous community.

Others

• CSIRT.es Network: National coordination network of Spanish CSIRTs in which Cyberzaintza's CERT participates. Indirectly comparable as the federated body that orchestrates incident response across Spanish public-sector CSIRTs, with Cyberzaintza acting as the Basque node.
• European Cyber Security Organisation (ECSO): Industry/regional association in which Cyberzaintza's director holds a fifth-term board seat. ECSO is not a CERT but shapes EU cybersecurity policy and procurement, and Cyberzaintza's involvement there is a key differentiator versus other regional agencies.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/CyberzaintzaEJ
• YouTubeyoutube.com/channel/UC1wRcPhYtN_7R8Vw0KQc58w
• LinkedInlinkedin.com/company/cyberzaintza
• Instagraminstagram.com/cyberzaintzaejgv

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyberzaintza