Ayesa
Cybersecurity and SOC services unit of Ayesa, a major Spanish engineering group, combining IT and OT security delivery with post-quantum cryptography research.
Visit Website ↗ + Add to CompareOverview
Ayesa is a large Spanish engineering, technology, and consulting group whose cybersecurity unit, marketed as ITS Security, delivers both IT and OT security services, including architecture, managed detection and response, and compliance work, through a network of security operations centers. Its SOC in San Sebastián operates around the clock and is built around AI-assisted and quantum-computing-oriented detection tooling.
Founded in 1966 and headquartered in Seville, Spain, Ayesa has grown into a diversified multinational with more than 10,000 employees and roughly $800 million in annual revenue across sectors including infrastructure, energy, defense, aeronautics, banking, and telecommunications. Its dedicated cybersecurity practice numbers more than 200 specialists serving over 200 clients and generating roughly €20 million in annual cybersecurity-specific revenue.
What distinguishes Ayesa’s security practice is its combination of IT and OT security under one roof, a genuine differentiator versus pure-play IT security vendors given Ayesa’s deep legacy in industrial and infrastructure engineering. The unit is also involved in Spanish government-funded post-quantum cryptography research, the BAQURA project, backed by Spain’s national cybersecurity institute, INCIBE.
Innovation Matrix Assessment
Steady expansion of SOC capacity, such as the San Sebastián facility, and a new post-quantum cryptography research initiative show continued investment, but as a division of a large diversified engineering group, pace is more incremental than a focused pure-play security vendor.
Combined IT/OT security delivery backed by a 200-plus person practice and a 24/7 SOC represents genuine operational scale, though this scale sits within a much larger non-security-focused parent organization.
Recent wins, including a top-ranked IT/security services provider position in Spain and an INCIBE-backed post-quantum project, indicate continued market standing, though growth is incremental relative to the parent company's overall diversified business.
As a large, decades-old engineering conglomerate's security division rather than a focused security product company, this is properly scored as a low-disruption incumbent by this site's convention, despite genuine OT/IT security capability.
A reported 200-plus clients and roughly €20 million in cybersecurity-specific revenue, alongside a documented ransomware incident affecting Ayesa itself per INCIBE-CERT, give mixed but real-world signal; no independent third-party security testing of its SOC/MDR services was found.
Combined IT/OT security and SOC services address genuine enterprise and critical-infrastructure needs, particularly for European organizations in energy, transportation, and industrial sectors that value a single vendor spanning both domains.
Why CISOs Should Care
For organizations needing combined IT and OT security coverage, particularly in energy, transportation, and industrial sectors, Ayesa's ITS Security unit offers SOC and managed detection services backed by deep engineering-sector domain knowledge.
What Makes It Different
Delivers cybersecurity as part of a much larger industrial and infrastructure engineering group, giving it OT and industrial-systems context that pure-play IT security vendors typically lack.
The Matrix Verdict
50/100 — INCREMENTAL INNOVATOR
A credible IT/OT security practice with real SOC scale, but fundamentally a division of a large diversified engineering conglomerate rather than a focused security vendor, which caps its disruption potential under this site's scoring convention.
Editorial Note: Claims vs. Verified Findings
Ayesa's size, revenue, and 1966 founding are independently corroborated by multiple business databases; the ransomware attack on Ayesa is independently documented by Spain's INCIBE-CERT. Specific cybersecurity-unit revenue (roughly €20M) and staff counts (200-plus) are company/press-disclosed and were not independently re-verified.
Sources
Alternatives to Ayesa
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Edge Delta
A telemetry pipeline and AI-agent observability platform that processes logs, metrics, and security data at the edge to…
Lumu Technologies
Network detection and response vendor using Continuous Compromise Assessment to show where compromise has actually happened, integrating with…