Customer care 919 31 00 00 Español
Legal information

Cybersecurity and SOC

Last updated: 04/11/2026

CERT Startia Operadora is our incident response team and security operations centre (SOC). It monitors STARTIA's networks and services, responds to incidents affecting the company and its customers, and shares threat intelligence with the CSIRT community to protect the Spanish and European digital ecosystem.

1. What we do

1

Incident response

  • Triage: verification, classification and prioritisation.
  • Coordination: notifying affected parties and other CSIRTs.
  • Resolution: support with containment, eradication and recovery.
2

Proactive services

  • Security monitoring (SOC) of our own networks and services.
  • Malware and phishing campaign analysis.
  • Threat reports and indicators of compromise (IOCs).
  • Awareness and advice for customers.

We handle all types of incidents within our scope: malware, phishing and fraud, intrusions, denial of service, resource abuse and data leaks. We classify and prioritise them according to Spain's National Guide for Cyber Incident Notification and Management.

2. Constituency

  • Startia Operadora's networks, systems and services.
  • Our customers, within the services they have contracted.
  • Domains startia.es and startia.eu.
  • Network resources 193.30.100.0/24.

We cooperate with INCIBE-CERT, the reference CSIRT for private companies in Spain, with law enforcement and with other providers to resolve incidents.

3. How to report an incident

  1. Email cert@startia.es. For abuse originating from our network (spam, scans, attacks from our IPs), use abuse@startia.es.
  2. If the information is sensitive, encrypt it with our OpenPGP key (fingerprint 3E63 F92D 01D8 CCCC 1A3F  EFEF E1AB 2BBE 4D15 4737, download).
  3. Where possible include: contact details, date and time with time zone, description, affected systems, technical indicators (IPs, domains, URLs, hashes, headers) and the TLP marking.
Emailcert@startia.es
Abuseabuse@startia.es
CERT phone+34 668 699 999
HoursMonday to Friday, 09:00–18:00 (Europe/Madrid), except Spanish national and Andalusian public holidays. Messages received outside these hours are handled on the next working day, except emergencies.
LanguagesSpanish and English
A customer with a fault or a question about your service? Call customer care on +34 919 31 00 00. The CERT handles security incidents.

4. How we handle information

We apply FIRST's Traffic Light Protocol (TLP 2.0): information is handled according to its marking and, if unmarked, as TLP:AMBER. Personal data is processed in accordance with the GDPR; reports we share do not include victims' personal data unless essential, and then only over an encrypted channel. Our outgoing communications are signed with the CERT key.

5. National Security Framework (ENS)

ENS compliance in progress, ALTA category.

Our systems are designed and operated applying the measures of Spain's National Security Framework (Royal Decree 311/2022) and the CCN-STIC guides. We will publish the certificate of conformity here once obtained.

The technical measures applied on this website are described in Security and responsible disclosure.

6. Documents

7. Cybersecurity services for customers

We put our SOC's expertise at the service of businesses and public bodies: managed cybersecurity for businesses and cybersecurity and ENS compliance for the public sector.