HodeiShield®

Cybersecurity from the Basque Country, and a product you can check

HodeiShield is built by Hodeitek S.L., based in Aretxabaleta, Gipuzkoa. We built it for security and compliance teams that must prove their posture under NIS2, ENS or DORA and need more than a score: evidence that holds up in an audit.

Request a demoVisit hodeitek.com (opens in a new tab)
Company record
Legal name
Hodeitek S.L.
Tax ID (NIF)
B56478027
Registered address
Markole, Aretxabaleta, 20550, Gipuzkoa, Spain
Founded
October 2023, in Aretxabaleta
Product
HodeiShield®, a registered trademark of Hodeitek
Contact
info@hodeitek.com
Security
security@hodeitek.com
Company website
hodeitek.com (opens in a new tab)

Why HodeiShield exists

Third-party management and compliance usually live in separate tools and spreadsheets that fall out of date between audits. NIS2, DORA and the ENS demand control of the supply chain with current evidence, and mid-sized organizations have no engineering team to build it. The outcome repeats in three symptoms.

  1. What happens

    Scores without euros

    What HodeiShield does

    A FAIR exposure in euros per supplier and for the portfolio, with a simulated uncertainty band (uncalibrated), so the board gets something comparable.

    Docs · Risk engine (opens in a new tab)

  2. What happens

    Evidence with no expiry date

    What HodeiShield does

    Evidence expires: a device that stops reporting stops counting as compliant (7-day freshness by default).

    Docs · Endpoint agent (opens in a new tab)

  3. What happens

    Attestations you have to take on trust

    What HodeiShield does

    An attestation anyone can verify offline, with an open-source verifier (Apache-2.0) and ML-DSA-65 signatures.

    Code · ATTEST verifier (opens in a new tab)

That is why HodeiShield is a single loop, SENSE, PREDICT, ACT and ATTEST, and not a sum of modules.

What is certified, and what is not

Hodeitek S.L.'s certifications include HodeiShield in their scope. We keep that apart from what we do not claim.

Hodeitek S.L., with HodeiShield in scope

See Hodeitek at hodeitek.com (opens in a new tab)

What we do not claim

  • HodeiShield measures your posture; it does not certify your organisation's compliance and is not in the CPSTIC catalogue, which is a different thing.
  • The ECSO label and the INCIBE listing are not equivalent to a certification.
  • An ATTEST attestation proves integrity and origin, not the truthfulness of what is attested, and does not replace an audit.

Do not take our word: check it

Every claim on this site points to evidence you can look at without talking to anyone.

Questions about who is behind it

What a security lead usually asks before requesting a demo.

Who builds HodeiShield?

Hodeitek S.L. (tax ID B56478027), a cybersecurity company based in Aretxabaleta (Gipuzkoa, Spain), founded in October 2023. HodeiShield® and Hodeitek® are registered trademarks.

Is HodeiShield certified?

Yes. Hodeitek S.L. is certified for ISO/IEC 27001 and the ENS Medium category (certificate no. 34/5704/26/09103, OCA Instituto de Certificación), with a scope that includes the HodeiShield SaaS service, and holds the ECSO “Cybersecurity Made in Europe” label (self-declared European origin).

Where is the data hosted?

In the EU: OVH, in Gravelines (France), with a managed application, database and storage. Cloudflare (US) acts as DNS, CDN and TLS in the request path.

Can you give me references from other customers?

We do not publish customers. What we offer is evidence you can check yourself: the public documentation, the CLI and the ATTEST verifier.

How do I reach Hodeitek's security team?

Write to security@hodeitek.com. For anything else, info@hodeitek.com.

Get to know us with the product in front of you

The quickest way to decide whether HodeiShield fits is to see it on your framework and your case.

A person at Hodeitek replies by email.

Request a demoRead the documentation (opens in a new tab)