Automotriz
Concesionarios, manufactura y movilidad conectada.
Boutique firm · By invitation
Managed Cybersecurity for Critical Infrastructure
Managed securityfor organizationsthat cannot fail.
When a minute of downtime costs millions, you don't need another firewall — you need an operator. REZA continuously runs the security of organizations where uptime, data and trust are non-negotiable.
GDPR·HIPAA·ISO 27001·SOC 2·NIST
SOC // LIVE — 24/7 Global Monitoring
REZA Sentinel Core · v4.2.1
GDPRHIPAASOC 2ISO 27001
BACKUP INTEGRITYVERIFIED
STABLE
UPTIME WANACTIVE
99.98%
VPN TUNNELSONLINE
08/08
Threat Shield Activity
02 INCIDENTS RESOLVED
01 CRITICAL
Events / 24h
14,832
Blocked FW
2,401
Anomalies
03
02 / 11REZA in numbers
99.98%
Monitored availability
24/7
Continuous operations
100%
Validated backups
<15m
Median time to detect
ISO 27001
Aligned framework
Trusted across sectors
AutomotiveManufacturingGovernmentRetailFinancial ServicesCritical Infrastructure
03 / 11
[ Why we exist ]
Organizations buy firewalls every year. Few have real visibility of what's happening inside.
The visibility gap
01
Tools, not operations
Companies stack licenses, antivirus and appliances — without an operator turning them into outcomes.
02
PDFs nobody reads
Quarterly audits land in a folder. They don't translate into hardening, response or board-level decisions.
03
Backups that don't restore
'Backup complete' is not proof. Most teams discover the failure the day they need to recover.
REZA exists to close that gap. Continuous operations, executive clarity and proven restores — for organizations that cannot afford to find out the hard way.
[ Sectores que protegemos ]
Industrias donde la disponibilidad no es opcional.
Financiero
Bancos, cooperativas y procesadoras de pagos.
Gobierno
Instituciones reguladas y entidades autónomas.
Retail
Cadenas con múltiples puntos de venta y e-commerce.
Infraestructura Crítica
Energía, telecom y servicios esenciales.
Manufactura
Plantas con OT/IT convergente y cadenas de suministro.
04 / 11
[ Vision · Mission · Values ]
We don't sell technology. We sell trust that lasts decades.
REZA Consulting is not built to be the largest cybersecurity firm in the region. It is built to be the most trusted partner for a select group of organizations that cannot afford to fail.
Vision
To be the cybersecurity firm that critical organizations call before making any strategic decision.
Not the biggest. The most trusted. A long-term ally for CIOs, CTOs and CEOs who understand that security is a board-level conversation.
Mission
Protect the operational continuity of organizations that cannot afford a minute of downtime.
Through advanced monitoring, automated response, executive reporting and continuous compliance — delivered as a managed service, not as projects.
Purpose
Turn every client into a long-term asset built on trust, results and continuity.
When our clients change companies, they take REZA with them. That's the real measure of a relationship — and the standard we hold ourselves to.
Core Values
01
Trust over volume
A few strategic clients for a decade beats a hundred transactional ones for a year.
02
Continuity, not projects
We sell ongoing protection and maturity, not one-off deliverables that age out.
03
Executive clarity
Every report is written for the board: risk, impact, decision — no technical noise.
04
Engineered discipline
Hardening, automation and proven restores. We measure what we promise.
05
Selective by design
We work with organizations where security is a real priority, not a checkbox.
06
Compliance as a baseline
GDPR, HIPAA, ISO 27001, SOC 2, NIST — table stakes, not differentiators.
05 / 11Leadership
Founder · Lead Architect
Roque Ernesto Zabala Alcántara
[ Founder & Lead Architect ]
Security architecture led by an operator, not a salesperson.
REZA was founded by Roque Ernesto Zabala Alcántara — Cybersecurity Engineer (UNICARIBE), MSc candidate in Cybersecurity at OBS Business School / Universitat de Barcelona, and former Cybersecurity Lead at Agencia Bella (Honda Dominicana). His career spans five years of hands-on work inside critical corporate infrastructure: network segmentation, Active Directory hardening, firewall operations (Fortinet, Sophos, pfSense), Azure governance, SIEM monitoring and incident response.
Before founding REZA, he served as Cybersecurity Analyst at the Instituto Dominicano del Café (INDOCAFE), where he implemented microsegmentation, RBAC controls and Windows Server hardening across the institution. Every REZA engagement is shaped by that direct operational experience — boutique, accountable, and personally led by the founder.
MSc Cybersecurity — OBS / UBBEng Cybersecurity — UNICARIBEMicrosoft Azure AZ-104Fortinet NSE 4OPSWAT ICIPEF SET English C1Honda Dominicana — Cybersecurity Lead
We don't sell tools. We operate the security of organizations that cannot afford to find out the hard way.
06 / 11
[ Modular Ecosystem ]
Integrated corporate defense
Interconnected components forming the definitive digital wall for global critical infrastructure that cannot afford a minute of downtime.
01
Sentinel Core
The central intelligence engine that centralizes logs, events and automated responses across your entire network.
WazuhGrafanan8n
02
Network Vision
Deep visibility into VLANs, VPN tunnels, FortiGate clusters and real-time bandwidth consumption.
ZabbixFortigateMikroTik
03
Threat Shield
Proactive detection of malware, brute-force attacks and behavioral anomalies at critical levels.
Wazuh SIEMSuricata
04
Backup Guardian
Automated integrity validation. It's not enough that the backup says 'complete' — we prove it restores.
ProxmoxPBSVeeam
05
Executive Reports
Automated executive PDFs with findings, risk scoring, availability and actionable recommendations.
PDF AutoWhatsApp
06
Compliance Watch
Continuous monitoring of GDPR, HIPAA, ISO 27001, SOC 2, NIST and global regulatory frameworks.
GDPRHIPAASOC 2ISO 27001
CyberScore Global™
See what hackers see of your company.
Automated external attack surface audit: domains, public IPs, SPF/DKIM/DMARC, SSL certificates, exposed ports and data leaks. Executive report in minutes.
84
Global Average Score
[ Caso de estudio · Anonimizado ]
Multinacional Automotriz · Caribe
Segmentación y fortalecimiento de infraestructura crítica.
Desafío
Una red plana con visibilidad limitada entre VLANs, controles de acceso heredados y un Active Directory expuesto a movimientos laterales. Auditorías sin acciones concretas y backups sin pruebas de restauración.
Intervención
Microsegmentación VLAN, RBAC en Active Directory, hardening de Windows Server, operación continua de FortiGate y verificación periódica de restores. Reporte ejecutivo mensual para dirección.
Superficie de ataque
Reducida
Visibilidad de red
Centralizada
Gobierno de seguridad
Continuo
07 / 11
[ Real outcomes ]
Incidents prevented before they became headlines.
Anonymized case studies from REZA-monitored environments. Every event was contained, escalated and reported to executives within minutes.
CASE 01
Ransomware
Ransomware detected before execution
Anomalous lateral movement triggered Threat Shield. Containment and rotation of credentials completed before payload detonation.
CASE 02
Backup
Restore proven the day it mattered
Backup Guardian had validated nightly restores for 47 days. When ransomware hit, recovery time was hours instead of weeks.
CASE 03
Exposure
Public exposure found by CyberScore
Externally exposed RDP and an expired certificate identified before any opportunistic scan could reach them.
CASE 04
Compliance
Non-compliance caught before audit
Drift in logging and access policies surfaced 6 weeks before the ISO audit window. Remediation closed cleanly.
08 / 11
[ What we are — and what we are not ]
We don't compete with resellers. We replace the worry.
REZA is not a box mover, not a one-off project shop, and not a ticket queue. We are the team a CEO calls before making a critical decision.
What we don't do
- We don't resell licenses without strategy
- We don't ship PDFs that nobody reads
- We don't disappear after the project
- We don't pretend tools alone make you safe
What we do
- We operate security continuously
- We report for executives, not for technicians
- We respond when something actually matters
- We engineer hardening, automation and proven restores
09 / 11
[ By invitation only ]
A private engagement for organizations that cannot afford to fail.
REZA Trusted Partner is not a subscription. It is a long-term, executive-level relationship offered to a select group of organizations that treat cybersecurity as strategic infrastructure.
Level 0101
Client
A company hires us for a one-time evaluation, audit or assessment.
$1K – $5K
Level 0202
Recurring Client
Audits, hardening, training, policies and continuous evaluations.
$5K – $20K / yr
Level 0303
Strategic Client
We're consulted before buying technology, opening sites or meeting regulations.
$20K – $100K+ / yr
Level 0404
Lifetime Partner
When the CIO, GM or CEO changes companies, REZA goes with them.
Compounding value
[ Program ]
REZA Trusted Partner™
Trusted Partner is offered exclusively to organizations selected for fit, scale and strategic alignment. The goal is not to sell more services — it is to become the single trusted line your leadership team calls before any critical decision.
We don't aim to be the biggest firm in the region. We aim to be the most trusted for a select group of organizations.
Trusted Partner benefits
- Quarterly security review with executive readout
- Monthly strategic alignment meeting
- Board-ready executive reporting
- Priority access and rapid incident response
- Preferred pricing across the catalog
- Direct line to your dedicated security architect
10 / 11
[ Protection Models ]
Scalable strategic investment
Security infrastructure as a service. Automated onboarding, no sales calls. Activate, configure and monitor in minutes.
Level 01 — Visibility
Continuous Monitoring
$299USD/mo
- Uptime, WAN & critical servers
- Backup verification & alerting
- Monthly executive report
- Email, Telegram & WhatsApp alerts
- Quarterly posture review
Recommended
Level 02 — Recommended
Managed Security
$1,500USD/mo
- Everything in Level 01
- Managed Wazuh SIEM & vulnerability program
- Server, endpoint & network hardening
- Live executive dashboards
- Backup Guardian & restore drills
- Dedicated security architect
Level 03 — Enterprise
Virtual SOC & SOC-as-a-Service
From $5,000USD/mo
- Everything in Level 02
- 24/7/365 SOC operations
- Incident response & forensics
- Compliance auditing (ISO / NIST / SOC 2)
- Board-level executive reporting
- Dedicated architect & response team
Hablemos
[ Conversación confidencial ]
Hablemos de su entorno.
La experiencia REZA es consultiva y boutique. Una conversación de 30 minutos con el fundador para entender su contexto antes de cualquier propuesta.
soporte@rezacyber.com
[ Solicitud privada ]
Tres campos. Una conversación.
Menos fricción. Respondemos en menos de un día hábil con una propuesta de horario para una primera conversación de 30 minutos.