Go to Content
Emergency 24 by h: Notice of an incidentOn-call technician; the time is --:--
OvnarCybersecurity and Web Development

Ovnar Cybersecurity + Web Development

Grow your business.
Protect what matters.

Cybersecurity and web development for businesses and SMEs. We create your digital presence and protect your systems so that you can focus on growing your business.

Responsive DesignInitial Technical SEOThe clear budget
Your next digital project
OvnarA good first impression

Your business deserves a great website.

Design that communicates. Technology that accompanies.

DesignedOf course, and to your extent
SecurityFrom the beginning
SEOA solid base
From the first click to the next step

Illustrative visual concept. Each project is designed accordingly.

The same team for your digital businessWeb developmentOnline shopsCybersecuritymaintenance

Web development · Design · Initial SEO

Your next website starts here.

We design and develop web pages for self-employed people, businesses and SMEs. A clear, fast and mobile web, with the security and technical positioning present from the beginning.

to start

Essential landing

A page to present your business and receive consultations.

from 590 €
  • Landing page with up to 6 sections
  • Design adapted to mobile and computer
  • Contact form
  • Technical SEO and Basic Metadata
  • 1 revision round
Request a quote
to sell online

The Online Shop

A shop ready to start selling.

from 2.490 €
  • Setup of up to 20 products
  • Catalogue, cart and checkout
  • Integration of a Payment Gateway
  • Initial shipping setup
  • Usage training and 2 revision rounds
Request a quote

Indicative prices excluding VAT. Budget closed after the scope. Domain, hosting, licenses, payment commissions, translations and writing of texts not included. Custom integrations are quoted separately.

Web maintenance from 49 €/month + VAT

Updates, monthly copy and up to 30 minutes of content changes per month. Recovery and complex incidents under budget.

Ask about maintenance

We work with recognized methodologies.

  • OWASP
  • MITRE by ATT&CK
  • NIST by CSF
  • PTES
  • The CIS Controls
  • OSSTMM

The first tests are free.

We review from outside your website, your email and whether your domain appears in filters. Without touching your systems, without commitment and with the result explained in a call 30 for minutes.

See what it includes
Services

Eight areas, one team responsible.

What we find, we fix it, and then we keep watching it. You don’t have to coordinate three suppliers or repeat your case every time.

View the full catalogue

Audit and Evaluation

We tell you where you are exposed, what is urgent and what you can expect. We almost always start here.

  • Express Audit for SMEs
  • Complete Safety Audit
  • Periodic vulnerability analysis
See the area 11 Services

Pentesting and offensive tests

We attack your systems with permission and in writing, as someone from outside would do, so that we can find it first.

  • Pentesting of web applications
  • Pentesting of mobile applications
  • Pentesting of APIs
See the area 10 Services

Protection and hardening

We are not in the report. We configure, close holes and leave your systems more difficult to attack.

  • Based on Microsoft 365 and Google Workspace
  • Safe configuration of servers and equipment
  • Multi-factor authentication (MFA)
See the area 13 Services

Managed Services

We pay a monthly fee and we work on a continuous basis. For companies that do not have, nor want to have, a security department.

  • External Security Officer (VCISO)
  • Monitoring 24/7
  • Management of patches and updates
See the area 10 Services

Response to Incidents

When something has already happened. We contain the attack, we recover what we can and we find out how they entered.

  • Emergency Care
  • Recovery and Ransomware
  • Digital forensic analysis
See the area 8 Services

Training and awareness

Most attacks begin with a click. We teach your team to recognize them without getting bored.

  • Training for employees
  • Periodic phishing simulations
  • Training for Managers
See the area 8 Services

Continuity and Crisis Management

Prepare the worst day before it arrives: who does what, how it recovers and what it communicates.

  • Response Plan to Incidents
  • Business Continuity Plan
  • Recovery plan before disasters
See the area 6 Services

Strategic Consultancy

Safety from the beginning of each project, and helps to make decisions with technical criteria.

  • Safe architecture for new projects
  • Security in Cloud Migration
  • Safety Assessment of Suppliers
See the area 11 Services
Method

From the first contact to the daily monitoring.

The first step is free. In each of the following you know what we’re going to do, how much it costs and when you’ll have it.

  1. 1

    Free analysis

    We review your company from outside and explain in a call what an attacker sees.

    3 daysFree
  2. 2

    Audit by

    We review your systems and deliver the report with the urgent up to the whole.

    1 WeeklyClosed Price
  3. 3

    correction

    We arrange what is found by risk order, or we guide your computer, and we will check it again.

    2 A 6 Weeklyby tasks
  4. 4

    Continued surveillance

    Monitoring, patches, copies and line of emergencies. Each month, a report of one page.

    Monthlywithout permanence
The report

This is a report that the directory really reads.

  • A risk scoreTo see from a look where you are and how it improves month by month.
  • Problems ordered by urgencyThis week, this month or this quarter.
  • Explained in business languageWhat could happen and how much it would cost, not just the technical name of the failure.
  • Technical detail, apart fromFor your IT team, with the exact steps to correct each point.
I want my report
Why Ovnar

The complaints of always, converted into rules.

These are the things that are most repeated when a company talks about its security provider. We work just the reverse.

The usual in the sector

  • reports of 200 pages that no one reads
  • Changes in half of work
  • Fear to sell more
  • Deliver the report and disappear
  • A centrality that passes you from one department to another

How we do it in Ovnar

  • A summary of a page for the address and the technical detail apart
  • Closed and written price before starting
  • Every risk explained with what would cost you if it occurs
  • We fix what we found and check it again.
  • A person who knows your company
Tariffs

Prices published, as it should be.

Start free and, if you want to follow, these are the three most common ways. For pentesting, incidents and custom projects, we give you a closed price after the first call.

0 €

Free initial analysis

Exposure on the Internet, mail, web, filters and false domains. Summary and Call of 30 for minutes.

Ask for analysis

Express Audit

To know where you are before you decide anything.

690 €

Single payments, even 25 Equipment
  • External and internal review
  • Mail, Accounts and Passwords
  • Status of the backup copies
  • Report with risk score
  • Meeting to explain the results
Ask for Audit
Recommended for SMEs

Monthly surveillance

For SMEs who want to forget the topic and let someone take care of it.

290 € The Month

According to the number of teams
  • Antivirus EDR Managed
  • Patches and Updates
  • Inspected and Tested Copies
  • Monitoring of filtration
  • Customer Panel and Monthly Report
  • Line of Emergency 24 h included
Contracting the surveillance

External Responsible

For companies that need someone to guide the security.

750 € The Month

With adjustable dedication
  • Annual Safety Plan
  • Monthly meeting with the Directorate
  • Treatment with suppliers and insurers
  • Phishing Training and Simulation
  • Priority in Emergencies
Talk about service

Price without VAT. Monthly services can be cancelled with 30 days’ notice.

Emergency

Are they attacking you right now?

Screenshots with a ransom note, files that don’t open, emails that no one has sent. Don’t wait, every minute counts.

Available Guard Technician Notice of an incident

Every day of the year, at any time. Your notification is a priority.

  1. Disconnect the affected equipment from the networkRemove the cable and turn off the wifi to stop the spread.
  2. Do not delete themLights keep track that we need to know what has happened.
  3. Do not pay any rescue.Do not guarantee that you will recover the data and mark you as a target for the next time.
  4. Do not delete anythingNo emails, no files, no records, even if they seem suspicious.
  5. warningfrom the emergency form. We guide you from the first moment and go where you need.
Frequent Questions

What you ask before you start.

If your doubt is not here, ask us directly. We answer in a working day.

Do you prefer to talk about it?

Please contact us from Monday to Friday. 9:00 A 18:00.

to write us
Does the free analysis have a fine print?

No. It’s an external and non-intrusive analysis: let’s look at what anyone can see of your company from the internet, without entering your systems. We only ask you to authorize us in writing as responsible for the domain. We do not order a card and there is no commitment to hire anything.

We are a small company. Can they really attack us?

Yes, and that’s the most common thing. Most attacks are not directed to anyone in particular: they automatically search for weak passwords, outdated devices, and emails that someone opens. SMEs usually have fewer defences and therefore become easier targets.

We already have an IT provider. Why do we need you?

We work alongside them, not instead of them. Maintaining your systems and defending them from an attack are different tasks. We give you tools, we review the configuration and we stay with surveillance and emergencies.

What exactly does the Express Audit include?

We review what you see of your company from the internet, email, accounts and passwords, main equipment and backups. You receive a one-page summary for management, a separate technical report and a meeting to explain it.

Can penetration tests take our systems offline?

We always sign in writing the scope, schedules and what is not touched. Risk tests are done outside the working hours and with someone on your side available. If anything behaves unexpectedly, we stop.

Do I have to commit to a minimum term?

No. Monthly services can be cancelled with 30 days’ notice. We prefer you to stay because it serves you.

What happens if we are attacked on a Sunday morning?

You will notify us from the emergency form, which marks your request as a priority, and the on-call technician contacts you. It guides you from the first moment and, if necessary, we connect remotely or go to your offices.

How do you handle the information you see about our company?

We sign a confidentiality agreement before we start. What we see is left in encrypted systems with limited access to the team that works with you, and is deleted when the project ends if you ask it.

Start by knowing where you are. and free.

In three working days you know what an attacker sees in your company and what it is best to fix first.

The Ovnar website was developed by Edgar Alves Fernández. Learn about his work and approach to web development.