rcc advisory

What rcc advisory does

RCC Advisory S.L. is a privately held Spanish cybersecurity consultancy (sociedad limitada, CIF B19480268) founded by former military cybersecurity operators and headquartered in Madrid. The firm markets itself as providing "world-class cybersecurity solutions backed by the discipline of a military-trained team," with team members stating 15-20+ years of experience in SEGINFOSIT units, electronic warfare, strategic transmissions, RED TEAM operations under Special Operations Command, and collaboration with the Cyberspace Command.

The company's core offering is a broad portfolio of professional cybersecurity services rather than a proprietary software platform. Services include cybersecurity consulting, regulatory compliance advisory (ENS, NIS2, ISO 27001, NIST), security awareness training, incident response, CISO as a Service, penetration testing under PTES methodology, IT/OT environment audits, an AI-integrated Security Operations Center, phishing simulation campaigns, system hardening, and backup solutions. The differentiator emphasized in the company's positioning is military-grade expertise and deep knowledge of Spain's CCN (Centro Criptológico Nacional) framework, particularly the Esquema Nacional de Seguridad (ENS).

Commercially, RCC Advisory operates a sales-led, direct-engagement model: clients initiate contact through website forms or email, after which the firm delivers customized, quote-based engagements — likely project work and retainers. The target customer base spans engineering, manufacturing, infrastructure, consulting, and public sector, with public sector flagged as the primary segment. There are no disclosed funding rounds, no listed customer logos, no public pricing, and no quantified headcount; the firm's scale is best inferred from its single-region (Madrid) footprint and the small size implied by the absence of institutional backing.

Name

rcc advisory

Legal name

RCC Advisory S.L.

Website

https://rccadvisory.es

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

1–10 employees

Short description

RCC Advisory is a privately held Madrid-based cybersecurity consultancy founded by former military cyber operators, selling compliance, advisory, managed SOC, and incident response services to Spanish public-sector and regulated-industry clients.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting

NAICS

Other Scientific and Technical Consulting Services (54169)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Security Governance, Risk & Compliance (GRC) Advisory (BPAKADAG)

akta.pro secondary industry

Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA)

Keywords

• Cybersecurity consulting
• Compliance advisory
• Incident response
• Security audits
• Managed security

Headquarters

HQ city

Madrid

HQ country

Spain

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Professional Cybersecurity Services: RCC Advisory generates revenue through providing customized cybersecurity consulting, compliance services, training, and incident response services to enterprise and public sector clients. Services are tailored to each client's specific needs, indicating a project-based or retainer engagement model.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels1 record

Core offering

RCC Advisory (legal name: RCC Advisory S.L.) is a Spanish cybersecurity consulting firm founded by military veterans and based in Madrid. It delivers advisory, audit, and managed security services including cybersecurity compliance (ENS, NIS2, ISO 27001, NIST), incident response, CISO-as-a-Service, penetration testing, IT/OT audits, AI-integrated SOC, phishing campaigns, system hardening, and backup solutions.

Product overview

RCC Advisory is a cybersecurity services company founded by military veterans, offering a comprehensive portfolio of cybersecurity consulting services. Their service offering includes strategic advisory services (CISO as a Service, regulatory compliance for ENS, NIS2, ISO 27001, and NIST), operational security services (pentesting, IT/OT audits, AI-integrated SOC, phishing campaigns, system hardening, and backups), and training programs. The company leverages deep expertise from military cyber warfare backgrounds to deliver proactive threat prevention and incident response capabilities.

Differentiator

Problem solved

Functional benefit

Products and services

• Cybersecurity Compliance Advisory (ENS, NIS2, ISO 27001, NIST) Advisory and implementation services to help organizations achieve and maintain compliance with major cybersecurity frameworks including ENS, NIS2, ISO 27001, and NIST. Targeted at regulated organizations needing structured security governance.
• Incident Response Reactive and proactive incident response services to contain, investigate, and remediate cybersecurity incidents for organizations experiencing or preparing for security breaches.
• CISO as a Service Outsourced CISO-level leadership providing security strategy, governance, risk management, and security program direction for organizations without a full-time in-house CISO.
• Penetration Testing Authorized offensive security testing of networks, applications, and infrastructure to identify exploitable vulnerabilities before attackers can leverage them.
• IT/OT Security Audits Specialized audits covering both information technology and operational technology environments, designed for industrial and critical infrastructure operators with converged IT/OT estates.
• AI-Integrated SOC Managed Security Operations Center services that integrate artificial intelligence for threat detection, triage, and response, providing ongoing monitoring and alerting for client environments.
• Phishing Campaigns / Awareness Simulated phishing campaigns and related end-user security awareness services designed to measure and reduce human-factor risk within client organizations.
• System Hardening Configuration hardening services for operating systems, networks, and applications to reduce the attack surface and align systems with security baselines.
• Backup Solutions Design, implementation, and management of backup and recovery solutions to support cyber resilience and ransomware recovery objectives.
• Cybersecurity Training Training programs for technical teams and end users covering security operations, secure development, and cyber hygiene, aimed at building internal security capability.

Segments5 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Scale indicators2 records

Expansion highlights5 records

Regional players

• Ibermática (Cybersecurity Practice): Spain/Portugal-headquartered IT services group offering cybersecurity consulting, managed services, and compliance. Competes in the same ENS/NIS2 mid-market and public-sector segments as RCC Advisory, primarily in Iberian geographies.
• Grupo CIES (Seguridad y Defensa): Spanish group focused on security, defense, and intelligence services, including cybersecurity advisory. Comparable in Spanish-market public-sector orientation and in leveraging defense-sector credentials for cyber engagements.

Direct peers

• EXCEM Technologies: Spanish cybersecurity and cryptography firm with strong ties to Spanish national-security and defense ecosystems. Comparable to RCC Advisory in CCN/ENS regulatory expertise and defense-adjacent positioning.
• S2 Grupo: Valencia-headquartered Spanish cybersecurity firm offering managed security services, incident response, and compliance advisory across public and private sectors. Closely comparable to RCC Advisory in service mix, Spanish-market focus, and emphasis on CERT-grade threat intelligence.
• Innotec Security: Spanish cybersecurity consultancy providing offensive security, GRC, and managed SOC services. Directly comparable as a Spain-based, mid-sized cyber advisory serving enterprise and public-sector clients with similar ENS/NIS2 compliance expertise.
• Wise Security Global: Madrid-based cybersecurity firm specializing in threat intelligence, red team operations, and digital forensics. Comparable in scale, geography, and the military/intelligence-grade talent profile that RCC also markets.

Broad incumbents

• Telefónica Tech (Cybersecurity): Telco-backed managed security and SOC services provider with deep Spanish market presence and large enterprise/government footprint. Overlaps with RCC on SOC, compliance, and incident response but operates at much larger scale and broader portfolio.
• Indra / Minsait (Cybersecurity): Spanish IT services major with a defense and cybersecurity division serving public-sector and critical-infrastructure clients. Competes directly for ENS/NIS2-driven public-sector mandates and offers similar SOC and compliance services at much larger scale.
• Accenture Security (Iberia): Global consulting firm's cybersecurity arm offering strategy, managed SOC, and compliance services across Spain and Portugal. Comparable service catalog but vastly larger delivery scale and ability to bundle with broader transformation programs.
• Deloitte Spain (Cyber Risk): Big Four advisory with a large Spanish cybersecurity practice covering GRC, ENS/NIS2, and managed security. Competes for the same enterprise and public-sector engagements as RCC Advisory but with multi-country delivery and integration into broader consulting offerings.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/rcc-advisory

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about rcc advisory