How can we help?

Disconnect the affected device from the network (cable or Wi-Fi), but don’t switch it off: we would lose evidence we need. Don’t pay any ransom and open an urgent incident from this page. An analyst will respond in under 30 minutes, any day, at any hour.

In most cases, yes. First we contain the attack so it doesn’t spread, then we look for intact backups and, where they exist, known decryption tools. We recommend never paying: it doesn’t guarantee recovery and marks you as a target.

Typical signs: forwarding rules nobody created, sent emails you didn’t write, logins from other countries, or customers receiving odd invoices in your name. We can review your Microsoft 365 or Google Workspace in under 24 hours.

Act within the first hours: call your bank to request a recall, report it to the police and let us know. We coordinate with the bank and provide the technical analysis they need. The sooner you act, the more likely the money is recovered.

It’s an email impersonating an executive to request an urgent, confidential transfer. We prevent it with filters that catch look-alike domains, mandatory verification of bank-detail changes and drills with your finance team so they can spot it.

It’s one of the most common scams. Before changing anything, always confirm by phone with a contact you already know, never using the number in the email itself. If in doubt, send us the message and we’ll analyse it for free.

If personal data is involved, GDPR requires notifying the supervisory authority within 72 hours and, if the risk is high, the affected individuals too. If your company falls under NIS2, the early warning to the CSIRT must be sent within 24 hours. We prepare both notifications for you.

Yes. We monitor forums, marketplaces and public leaks to detect your company’s credentials, documents or databases. If something appears, we alert you with the source and the steps to neutralise it.

It generally applies to medium and large companies (over 50 employees or €10M turnover) in sectors such as energy, transport, health, banking, water, digital, food or manufacturing, and to their critical suppliers. We check for free in a 20-minute call.

Under NIS2, up to €10M or 2% of global turnover for essential entities. Under GDPR, up to €20M or 4%. NIS2 also introduces personal liability for management. You can calculate your exposure with our free tool.

Yes. We review the request, gather the technical evidence, draft the response alongside your legal counsel and support you throughout the procedure to reduce or avoid the penalty.

Between 4 and 8 months depending on your size and maturity. We start with a 48-hour assessment that tells you exactly what’s missing, and support you until you pass the certification audit.

Yes. If you provide technology services to the public sector, the National Security Framework is mandatory at the corresponding level (basic, medium or high). We prepare you for certification and for keeping it every year.

It depends on scope, but we give you a fixed quote after the initial assessment, with no extra hours or surprises. Many companies can fund part of the project with public grants; we tell you which apply.

From the client portal, using the access we sent you when the service started. If you’ve lost it, email soporte@custodia.es from your corporate address and we’ll restore it the same day.

Your account manager updates it in under 24 hours. Just tell us the number of new users or devices; protection activates immediately.