Skip to content

Ayesa

Cybersecurity and SOC services unit of Ayesa, a major Spanish engineering group, combining IT and OT security delivery with post-quantum cryptography research.

Visit Website ↗ + Add to Compare
50/100Incremental Innovator

Overview

Ayesa is a large Spanish engineering, technology, and consulting group whose cybersecurity unit, marketed as ITS Security, delivers both IT and OT security services, including architecture, managed detection and response, and compliance work, through a network of security operations centers. Its SOC in San Sebastián operates around the clock and is built around AI-assisted and quantum-computing-oriented detection tooling.

Founded in 1966 and headquartered in Seville, Spain, Ayesa has grown into a diversified multinational with more than 10,000 employees and roughly $800 million in annual revenue across sectors including infrastructure, energy, defense, aeronautics, banking, and telecommunications. Its dedicated cybersecurity practice numbers more than 200 specialists serving over 200 clients and generating roughly €20 million in annual cybersecurity-specific revenue.

What distinguishes Ayesa’s security practice is its combination of IT and OT security under one roof, a genuine differentiator versus pure-play IT security vendors given Ayesa’s deep legacy in industrial and infrastructure engineering. The unit is also involved in Spanish government-funded post-quantum cryptography research, the BAQURA project, backed by Spain’s national cybersecurity institute, INCIBE.

Innovation Matrix Assessment

Innovation Velocity 5/10

Steady expansion of SOC capacity, such as the San Sebastián facility, and a new post-quantum cryptography research initiative show continued investment, but as a division of a large diversified engineering group, pace is more incremental than a focused pure-play security vendor.

Operational Value 6/10

Combined IT/OT security delivery backed by a 200-plus person practice and a 24/7 SOC represents genuine operational scale, though this scale sits within a much larger non-security-focused parent organization.

Market Momentum 5/10

Recent wins, including a top-ranked IT/security services provider position in Spain and an INCIBE-backed post-quantum project, indicate continued market standing, though growth is incremental relative to the parent company's overall diversified business.

Category Disruption 3/10

As a large, decades-old engineering conglomerate's security division rather than a focused security product company, this is properly scored as a low-disruption incumbent by this site's convention, despite genuine OT/IT security capability.

Real-World Efficacy 5/10

A reported 200-plus clients and roughly €20 million in cybersecurity-specific revenue, alongside a documented ransomware incident affecting Ayesa itself per INCIBE-CERT, give mixed but real-world signal; no independent third-party security testing of its SOC/MDR services was found.

Enduring Relevance 6/10

Combined IT/OT security and SOC services address genuine enterprise and critical-infrastructure needs, particularly for European organizations in energy, transportation, and industrial sectors that value a single vendor spanning both domains.

Why CISOs Should Care

For organizations needing combined IT and OT security coverage, particularly in energy, transportation, and industrial sectors, Ayesa's ITS Security unit offers SOC and managed detection services backed by deep engineering-sector domain knowledge.

What Makes It Different

Delivers cybersecurity as part of a much larger industrial and infrastructure engineering group, giving it OT and industrial-systems context that pure-play IT security vendors typically lack.

The Matrix Verdict

50/100 — INCREMENTAL INNOVATOR

A credible IT/OT security practice with real SOC scale, but fundamentally a division of a large diversified engineering conglomerate rather than a focused security vendor, which caps its disruption potential under this site's scoring convention.

Editorial Note: Claims vs. Verified Findings

Ayesa's size, revenue, and 1966 founding are independently corroborated by multiple business databases; the ransomware attack on Ayesa is independently documented by Spain's INCIBE-CERT. Specific cybersecurity-unit revenue (roughly €20M) and staff counts (200-plus) are company/press-disclosed and were not independently re-verified.

Sources