Engineering that joins the digital and the electrical.

STATORIS designs, protects and automates. Web, cybersecurity, artificial intelligence, home automation, IT automation and electrical installations, with one team accountable for the whole.

  • Spain
  • Europe
  • United States
One core, six disciplines Diagram with STATORIS at the centre connected to Web design, Cybersecurity, AI, Home automation, Automation and Electrical. Web design Cybersecurity AI Home automation Automation Electrical

Eleven engineering services, one team

Six disciplines and five specialised infrastructure and compliance services. Each works on its own; combined, they share design, documentation and a single accountable lead.

Disciplines

Web design

Design, development and maintenance of corporate websites and web applications, hosted on managed cloud with the security of a critical environment.

  • Corporate sites and e-commerce, accessible (WCAG 2.1 AA)
  • Dedicated or shared VPS hosting on Azure, AWS or European data centres
  • Anti-DDoS protection with HAProxy, TLS rated A+ and regular backups
  • Azure / AWS
  • VPS
  • HAProxy
  • TLS A+
  • CIS Benchmarks
Enquire

Cybersecurity

Systematic hardening of Linux and Windows Server systems with CIS Benchmarks and SCAP assessment, or with whichever guide applies to each client, without degrading operations.

  • Hardening to CIS Benchmarks, with automated SCAP assessment
  • Audit and compliance for NIS2 and the applicable guide; CCN-STIC and ENS for the public sector
  • Expert report signed with a SHA-256 hash
  • CIS Benchmarks
  • SCAP
  • CCN-STIC / ENS (public sector)
  • RHEL · Rocky · Debian
  • Windows Server
Enquire

Artificial intelligence

Sovereign AI: local models and assistants that work on your data without sending it to external providers.

  • Local open-source LLMs (Llama 3, Mistral, DeepSeek) on your own servers or private clouds
  • RAG over internal knowledge bases, with role-based access control
  • AIOps agents and an AI Gateway that anonymises personal data (EU AI Act and GDPR)
  • On-premise LLMs
  • RAG
  • vLLM / Ollama
  • Qdrant / pgvector
  • EU AI Act
Enquire

Home automation

Smart homes and buildings on open protocols, which keep working without depending on a single manufacturer.

  • Lighting, climate, access and energy
  • Open protocols such as KNX and Matter
  • Local control, with the cloud as an option
  • KNX
  • Matter
Enquire

Automation

Automation as code: declared, Git-versioned and reproducible infrastructure, with no manual changes on servers.

  • Ansible and Terraform with idempotent remediation (zero-drift)
  • CI/CD pipelines and GitOps, with the Git repository handed over to the client
  • Workflows and application integration through APIs
  • Ansible
  • Terraform
  • PowerShell
  • GitOps
  • CI/CD
Enquire

Electrical

Design, supervision and commissioning of electrical installations, connected from day one to every other system.

  • Projects and technical documentation
  • Switchboards and structured cabling
  • Energy efficiency and self-generation
  • Spain only
Enquire

Specialised services

Hybrid cloud and classified networks

High-security network perimeters with a dual firewall line (Fortinet and multi-vendor environments), large-scale Microsoft Azure deployments and secure connection to on-premise data centres through encrypted IPsec tunnels.

  • VLAN segmentation and high availability with HAProxy and Keepalived
  • Azure deployments of more than 9,000 servers
  • Classified networks with redundant IPsec
  • Microsoft Azure
  • Fortinet FortiGate
  • Classified networks
  • Redundant IPsec
  • VLAN
Enquire

Observability, immutable backup and resilience

Distributed monitoring with Elastic Stack, Grafana, Prometheus, Nagios and PRTG, and backups isolated from the main domain, with immutable WORM retention and contingency plans (DRP).

  • Backups out of ransomware's reach, segregated from the main domain
  • Disaster recovery plans (DRP) verified through drills
  • Integration with the support desk (ITSM) for a coordinated 24/7 response
  • Elastic Stack
  • Grafana
  • Prometheus / PRTG
  • WORM backup
  • Off-domain segregation
Enquire

Multi-level support and operations (L1, L2, L3)

End-to-end incident and infrastructure management under ITIL v4, with service level agreements (SLAs) from 1 hour.

  • L1: first-contact technical desk with first-call resolution
  • L2: advanced administration of Linux, Windows Server, hypervisors and networks
  • L3: direct escalation to senior engineers, kernel tuning and root cause analysis (RCA)
  • L1 · L2 · L3
  • ITSM / ITIL v4
  • 24/7 monitoring
  • SLA from 1 h
Enquire

VeriFactu and electronic invoicing (Spanish Tax Agency)

Consulting and implementation of the integrity, traceability and submission requirements for invoicing under Royal Decree 1007/2023 and Order HAC/1177/2024.

  • Code audit of invoicing software systems (SIF)
  • SHA-256 record chaining, XAdES/XMLDSig signature and regulatory QR code
  • API gateway to the Tax Agency (AEAT) and the responsible declaration (Declaración Responsable)
  • VeriFactu RD 1007/2023
  • Order HAC/1177/2024
  • SHA-256
  • XAdES / XMLDSig
  • AEAT API Gateway
Enquire

CE marking and Cyber Resilience Act

Conformity and cybersecurity assessment of embedded devices, network equipment, IoT gateways and industrial servers, under the low-voltage and electromagnetic compatibility directives and the Cyber Resilience Act.

  • Technical file and EU Declaration of Conformity
  • LVD 2014/35/EU and EMC 2014/30/EU directives
  • SBOM, signed firmware and secure OTA updates
  • CE marking
  • Cyber Resilience Act
  • LVD
  • EMC
  • IoT / Edge
Enquire

Four phases, with deliverables in each

No guesswork: every change is modelled as declarative code, versioned in Git and reproducible in minutes. The same process applies to a website and to a switchboard.

  1. Assess

    Read-only diagnosis, in volatile memory and with no downtime. You receive a report with priorities.

  2. Design

    We define a single architecture and replicate it in a digital twin (staging) to certify compatibility before touching production.

  3. Deploy

    Automated, idempotent remediation with Ansible and Terraform, in phases and with documented testing.

  4. Operate

    Expert report with a SHA-256 hash, Git repository handed over to the client, team training and continuous L1, L2 and L3 support.

Digital and physical systems fail together. We design them together.

A camera, a switchboard and an AI assistant share the same network and data. When each piece comes from a different supplier, nobody answers for the whole.

A single point of contact

One contract, one team and one technical lead across all disciplines.

Security by design

Network segmentation, access control and event logging are defined before installation, not after.

Deliverable documentation

Schematics, inventory, manuals and procedures stay with you, not only with us.

Hand-crafted administration versus immutable engineering

A comparison between conventional, non-declarative management and STATORIS immutable engineering.

Traditional administration Non-declarative

  • Configuration drift: servers diverge from their initial state and nobody knows for certain every directive that has been applied.
  • Risk of production outages: directives are applied to live machines, with no prior validation on identical replicas.
  • Reliance on human memory: critical knowledge lives with specific people; if they rotate or leave, the estate is left unprotected.
  • Hard to audit against any standard: there is no tamper-proof evidence of who applied each control, when and how.

STATORIS immutable engineering Zero-drift

  • Zero-drift: the private Git repository is the single source of truth; any unauthorised deviation is detected and reverted.
  • Prior validation on a digital twin: every Ansible playbook or Terraform module is rehearsed in an identical staging environment, to avoid outages.
  • Full client ownership: automation code, inventories and documentation are transferred to your own repository.
  • Expert signature with a SHA-256 hash: every intervention produces a signed, sealed artefact, valid for audits and regulators.

Scale and engineering standards

9,000+

Physical servers and virtual machines in multi-cloud environments

From 1 h

L1, L2 and L3 multi-level support SLA, with 24/7 coverage

100%

Declarative infrastructure, versioned in Git

Tailored solutions by infrastructure and criticality

Four engagement models to size the technical work to your estate of systems.

Model I · Fixed scope 10 to 200+ VMs

Audit and master plan

Defined, fixed scope after sizing the server estate.

Mode
Read-only (0 downtime)
Deliverable
SHA-256 report + CVSS
Contact
Assigned senior engineer
  • Inventory and analysis of the exposed attack surface.
  • Diagnosis with in-house scripts (Linux and Windows Server).
  • Findings matrix ordered by CVSS severity.
  • Executive report and prioritised remediation directives.
  • Baseline for continuous audits (CIS, SCAP or the applicable guide).
Request scope

Model III · Ongoing L1 · L2 · L3 support

Multi-level support retainer

Tailored quote after analysing infrastructure, systems estate and criticality.

Levels
L1 helpdesk + L2 sysadmin + L3 critical
Deliverable
RCA post-mortems + ITSM telemetry
SLA
Guaranteed response from 1 h
  • L1 desk for intake, triage and first-contact resolution.
  • L2 advanced systems and infrastructure administration (Linux and Windows Server).
  • Direct escalation to L3 senior engineers for critical incidents.
  • Preventive maintenance, security patches and telemetry monitoring.
  • On-call and out-of-hours cover (SLA from 1 h under addendum).
Assess your needs

Model IV · Managed cloud Azure / AWS VPS

Secure web in the cloud

Hosting and maintenance on optimised Azure or AWS VPS.

Mode
Dedicated / multi-tenant VPS
Deliverable
CIS Benchmarks + TLS A+
SLA
99.9% monthly availability
  • Design, development and maintenance of corporate websites.
  • VPS deployment (dedicated or shared instances, tailored).
  • Anti-DDoS mitigation and balancing with HAProxy (stick-tables).
  • Virtual hosts secured to CIS Benchmarks and TLS A+ certificates.
  • 24/7 monitoring and regular backups with a 99.9% SLA.
Enquire about hosting

Three markets, each with its own regulatory framework

We work to the reference standards of each territory. Those that apply to your project are confirmed during the assessment phase. Electrical engineering is currently offered in Spain only.

Spain

Headquartered in Madrid. Spanish-language support and a local presence for installations and projects.

  • REBT
  • GDPR and LOPDGDD
  • ENS (public sector)

Europe

Projects aligned with European standards, with a preference for hosting data within the European Union.

  • CE marking
  • NIS2
  • EU AI Act

United States

Enterprise deployments with English-language support and security frameworks recognised in the market.

  • NIST CSF
  • CIS Benchmarks

Engineering criteria, legal aspects and working procedures

Why outsource multi-level support (L1, L2 and L3) and hardening to STATORIS?

We offer end-to-end cover: a qualified technical desk (L1) for triage and first-contact resolution; advanced administration of Linux and Windows Server systems, hypervisors and networks (L2); and direct escalation to senior engineers (L3) for critical incidents, compliance audits (CIS, SCAP or the applicable guide; CCN-STIC and ENS for the public sector) and NIS2.

A team coordinated from start to finish shortens resolution times and removes intermediaries.

Can system hardening break services in production?

Our methodology is designed to prevent that. Every remediation is first drafted in a laboratory environment identical to production (staging). Hardening directives for PAM, SSH, SELinux or firewalls are rolled out progressively and idempotently, to keep legacy applications running.

How does the backup architecture protect against contingencies and ransomware?

We implement backups that are isolated and segregated from the main domain (independent networks), with immutable retention and WORM (Write Once, Read Many) storage. If ransomware encrypts the corporate network, the backups stay out of the attack's reach and allow a clean, verified recovery.

What does adapting to VeriFactu (Royal Decree 1007/2023) involve?

The regulation requires invoicing software to guarantee the integrity and traceability of records. We audit the source code, implement SHA-256 chaining, XAdES signing, the official QR code and the API gateway for submission to the Spanish Tax Agency (AEAT), and draft the required responsible declaration (Declaración Responsable).

What does secure web hosting involve, and what does an A+ TLS rating mean?

Unlike mass shared hosting with no supervision, we deploy web applications on virtual private servers (VPS) over enterprise cloud infrastructure (Microsoft Azure, AWS or European data centres), with dedicated or shared instances depending on need and budget.

An A+ rating from Qualys SSL Labs indicates a maximum-security cryptographic configuration: strict TLS 1.3 and 1.2, weak ciphers disabled and HSTS headers with preloading.

Tell us about your project

Describe what you want to solve. We will tell you where to start.

Address
CyberOps AI Engineering, S.L.
Calle Alcocer, 47, 4E
28021 Madrid, Spain

Controller: CyberOps AI Engineering, S.L. Purpose: to handle your enquiry. More information in the privacy policy.