MultiTrain
MultiTrain is a Sevilla-based Spanish managed cybersecurity services provider serving SMEs, large enterprises, and Andalusian public institutions via SOC (LockPyme, LockCorp), managed backup, and a proprietary AI platform called Enigma, holding ENS Nivel Alto certification.
- Company typePrivate
- Founded-
- HeadquartersCamas, Spain
- Headcount1–10
- GTM typeB2B
- OfferingServices
What MultiTrain does
MultiTrain (legal name: Yes We Train SL) is a Spanish managed cybersecurity services provider founded in 2014 and headquartered in Camas, Sevilla. The company delivers outsourced security operations to small and mid-sized enterprises, large Spanish corporates, and Andalusian public-sector institutions, with a stated service scope that extends across Europe. Its commercial offering is organized into four core lines: BackPyme (managed backup), LockPyme (entry-level SOC for SMEs), LockCorp (advanced SOC for enterprises and regulated entities), and Enigma (a proprietary cognitive AI platform). Adjacent services include Active Directory and Microsoft 365 auditing, ENS (Esquema Nacional de Seguridad) preparation, and Digital Forensics and Incident Response (DFIR).
The technical stack is anchored by Enigma, a proprietary cognitive AI that supports anomaly detection, autonomous agents, and knowledge retrieval, augmenting the firm's human SOC analysts rather than replacing them. MultiTrain holds ENS Nivel Alto certification, the highest tier of Spain's national cybersecurity framework, which is a prerequisite for certain public-sector and critical-infrastructure engagements. The business model is services-led: customers pay recurring managed-service fees for continuous monitoring, backup, and incident response, supplemented by project-based work for ENS preparation and AD/M365 audits. The disclosed customer base includes Abertis, Eiffage, Puig, Ayuntamiento de Jerez, Parlamento de Andalucía, Diputación de Málaga, Grupo Solutia, and OAAF, indicating a customer mix spanning large multinational enterprise and regional government, channeled in part through the 2025 Cámara de Comercio de Sevilla Pyme Digital Program and supported by EU ERDF co-financing.
The firm operates with a 6-person team, reflecting a small but specialist delivery base typical of a regional managed security services provider. There are no publicly disclosed revenue figures, funding rounds, or headcount-growth signals in the available data, which limits external visibility into commercial scale; however, the combination of high-tier certification, proprietary AI tooling, enterprise-grade reference customers, and institutional partnerships suggests a credible regional MSSP positioning rather than a startup-stage venture.
MultiTrain firmographics
Firmographics- Name
- MultiTrain
- Legal name
- Yes We Train SL
- Website
- https://multitrain.es
- Company type
- Private
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- MultiTrain is a Sevilla-based Spanish managed cybersecurity services provider serving SMEs, large enterprises, and Andalusian public institutions via SOC (LockPyme, LockCorp), managed backup, and a proprietary AI platform called Enigma, holding ENS Nivel Alto certification.
- Ownership category
- akta.pro rank
MultiTrain industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Facilities Management Services (541513), Other Computer Related Services (541519), Computer Systems Design and Related Services (5415)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Managed Detection & Response (MDR) & SOC Services (HDADAGAG)
- akta.pro secondary industries
- Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Backup & DR Software Implementation & Managed Platforms (BPAEALAI), IT Operations, Event & Incident Management (NOC/SOC-to-ITSM) (BPAEAJAH)
Keywords
Where MultiTrain is headquartered
LocationHeadquarters
- HQ city
- Camas
- HQ country
- Spain
- HQ region
- Europe
Offices1 record
Markets served
MultiTrain business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services (BackPyme, LockPyme, LockCorp): Recurring subscription-based managed security services covering backup, SOC monitoring, and advanced cybersecurity. Services are tiered by company size (SME vs. large enterprise) and include continuous monitoring, incident response, and crisis recovery. Revenue is recurring as clients pay for ongoing managed services.
- ENS Certification Preparation: Advisory and implementation services to prepare organizations for ENS (Esquema Nacional de Seguridad) certification, including gap analysis, documentation, technical implementation, and audit accompaniment. Likely one-time or project-based professional services.
- Active Directory and M365 Auditing: Technical auditing and hardening services for Microsoft infrastructure identity and access management. Delivered as a discrete consulting project with a prioritized remediation roadmap.
- DFIR (Incident Response): Emergency incident response and digital forensics services activated during security crises. Provided as on-demand professional services for containment, evidence preservation, and root cause analysis.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | BackPyme: Managed backup for SMEs |
| Subscription | Monthly | LockPyme: Managed SOC for SMEs |
| Subscription | Monthly | LockCorp: Advanced SOC for large enterprises |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels4 records
MultiTrain product offering
Product offeringCore offering
MultiTrain provides fully managed cybersecurity services for Spanish organizations, combining 24/7/365 Security Operations Center (SOC) monitoring with proprietary cognitive AI (Enigma), anti-ransomware backup replication, incident response, and ENS compliance preparation. The portfolio is tiered across BackPyme (managed backup for SMEs), LockPyme (managed SOC for SMEs), and LockCorp (advanced SOC for large enterprises), supported by Active Directory/M365 auditing and DFIR services.
Product overview
MultiTrain is a comprehensive cybersecurity company offering a portfolio of managed security services organized around its proprietary cognitive AI platform, Enigma. The core offerings include BackPyme (managed backup and anti-ransomware), LockPyme (managed SOC for SMEs), and LockCorp (advanced SOC for large enterprises), all augmented by Enigma's AI capabilities. Additional services include Active Directory and M365 auditing, ENS preparation, and DFIR incident response. The company operates a 24x7 SOC and targets both private companies and public administration clients.
Differentiator
Problem solved
Functional benefit
Brands
- BackPyme: Managed backup service and anti-ransomware solution that guarantees business continuity through rapid recovery and loan servers in case of critical failure.
- LockPyme
- LockCorp
- Enigma (IA Cognitiva)
- DFIR
Products and services
- BackPyme Managed backup and anti-ransomware service for SMEs without specialized IT staff, providing continuous replication, 30-day immutable replicas, continuous test restorations, and loaner servers for crisis recovery.
- LockPyme Managed Security Operations Center (SOC) service for SMEs without a cybersecurity team, providing continuous 24/7/365 monitoring of endpoints, servers, and Microsoft 365 / Google Workspace with comprehensible alerts and containment proposals.
- LockCorp Advanced managed SOC for large enterprises and complex organizations, including AI-driven monitoring, Threat Intelligence, proactive threat hunting, digital forensics (up to 3 hours/month), Dark Web monitoring, customized dashboards, tailored monitoring integrations, direct escalation protocols, and Virtual CISO (CISOaaS) advisory.
- Enigma (IA Cognitiva) Proprietary cognitive AI system that operates at the heart of MultiTrain's SOC, connecting security information into a unified view, reducing false positives, interpreting events in real time, providing context and hypotheses to analysts, and continuously learning from incidents.
- Auditoría de Active Directory y M365 Deep analysis and hardening of Microsoft identity infrastructure (on-premises Active Directory and Azure AD/Entra ID, plus Microsoft 365) to correct insecure configurations and reduce the real risk of ransomware or phishing attacks.
- Preparación para el ENS Advisory and implementation service for compliance with Spain's Esquema Nacional de Seguridad (ENS) under RD 311/2022, including gap analysis, documentation drafting, technical control implementation, information classification, and audit accompaniment.
- DFIR (Respuesta a Incidentes) Digital Forensics and Incident Response (DFIR) service combining real-time incident containment, attack reconstruction, attacker identification, evidence preservation, root cause analysis, and legally admissible evidence handling.
Quantifiable outcome
- 30-day immutability of backup copies ensures recoverability even 30 days after a ransomware attack.
- +2 more outcomes
Companies that use MultiTrain
Customer profileNamed customers8 records
Segments3 records
Ideal customer profiles3 records
MultiTrain technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature7 records
MultiTrain partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered minor and core.
- Programa Pyme Digital - Cámara de Comercio de SevillaminorMultiTrain (Yes We Train SL) participated in the EU-funded Programa Pyme Digital supported by the Cámara de Comercio de Sevilla in 2025, aimed at reinforcing the digitalization and competitiveness of SMEs. This programme provided a platform to promote MultiTrain's services to the SME segment.
- European Union (European Regional Development Fund)coreMultiTrain (Yes We Train SL) has been a beneficiary of European Funds (ERDF) whose objective is improving SME competitiveness. Through this support, the company launched a Digital Action Plan to reinforce the digitalization and competitiveness of SMEs during 2025.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
MultiTrain competitors and assessment
Company assessmentDirect peers
- S2 Grupo: Spanish cybersecurity services firm offering managed SOC, incident response, and CERT capabilities to enterprise and public-sector clients — directly comparable to MultiTrain's LockPyme/LockCorp and DFIR offerings in the same Spanish market.
- Entelgy (formerly InnoTec): Spanish-origin cybersecurity consultancy and SOC operator serving enterprise and public administration across Iberia, with comparable managed security and ENS-aligned services.
- Ackcent Cybersecurity: European SOC/MDR provider with strong presence in Spain, offering 24/7 managed detection and response to mid-market and enterprise — closely comparable delivery model and customer profile.
Broad incumbents
- CrowdStrike (Falcon Complete MDR): Leading global MDR provider; competes for LockCorp-tier enterprise customers with end-to-end managed SOC, threat hunting, and DFIR delivered as a vendor service.
- Sophos (Managed Detection and Response): Global MDR/SOC vendor serving SMEs and mid-market with managed detection, endpoint, and incident response — competes for the same Spanish SME segment targeted by LockPyme and BackPyme.
- Telefónica Tech (ElevenPaths): Largest Spanish MSSP/SOC operator through ElevenPaths, offering managed detection, threat intelligence, and enterprise security services — broader portfolio but directly competitive in Spanish enterprise and public-sector deals.
- Palo Alto Networks (Unit 42 MDR): Global cybersecurity platform offering managed detection, response, and threat intelligence; broad incumbent competing for enterprise SOC and incident response budgets.
Emerging players
- Seek and Protect: Spanish cybersecurity services firm providing SOC, vulnerability management, and incident response to SMEs and mid-market — directly comparable delivery scope to MultiTrain.
- CounterCraft: European cybersecurity firm offering deception-driven threat detection and managed services, with overlap in SOC-oriented offerings and Spanish/European enterprise clients.
Regional players
- Securitas Direct (Verisure): Large Spain-headquartered security services provider with adjacent managed monitoring offerings and SME reach — comparable customer overlap though more oriented to physical/connected security than pure-cyber SOC.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
MultiTrain social profiles
Digital presenceMultiTrain compliance and trust
Trust signalCompliance1 record
MultiTrain financial estimates
Financial estimateRevenue estimate
Valuation estimate
MultiTrain leadership team
Management profileNumber of profiles
Profiles3 records
MultiTrain funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
MultiTrain M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about MultiTrain
What does MultiTrain do?
MultiTrain provides fully managed cybersecurity services for Spanish organizations, combining 24/7/365 Security Operations Center (SOC) monitoring with proprietary cognitive AI (Enigma), anti-ransomware backup replication, incident response, and ENS compliance preparation. The portfolio is tiered across BackPyme (managed backup for SMEs), LockPyme (managed SOC for SMEs), and LockCorp (advanced SOC for large enterprises), supported by Active Directory/M365 auditing and DFIR services.
Is MultiTrain a public or private company?
MultiTrain is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was MultiTrain founded?
MultiTrain was founded in -1. It employs 1 to 10 people.
Where is MultiTrain based?
MultiTrain is headquartered in Camas, Spain, in the Europe region.
How does MultiTrain make money?
Four revenue lines are on record. Managed Security Services (BackPyme, LockPyme, LockCorp) is the primary driver. The others are ENS Certification Preparation, active Directory and M365 Auditing and DFIR (Incident Response).
Who are MultiTrain's main competitors?
Direct peers on record are S2 Grupo, Entelgy (formerly InnoTec) and Ackcent Cybersecurity. Broad incumbents are CrowdStrike (Falcon Complete MDR), Sophos (Managed Detection and Response), Telefónica Tech (ElevenPaths) and Palo Alto Networks (Unit 42 MDR). Emerging players are Seek and Protect and CounterCraft. Securitas Direct (Verisure) is listed as a regional player.
Does MultiTrain have an API?
No public API is recorded for MultiTrain.
What industry is MultiTrain in?
MultiTrain's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is HDADAGAG, Managed Detection & Response (MDR) & SOC Services, with a secondary code of BPAEAMAG, Cybersecurity Operations Outsourcing (SOC / SecOps). Its NAICS code is 541513 and its SIC code is 7370.