See what your company has exposed online — and close it with enterprise-grade judgment.
Attack surface assessment, web & edge security, and fractional security leadership for companies that don’t have a CISO.
Services
Projects with a clear start and end, defined pricing, and deliverables your team can act on. No open-ended retainers you can’t explain.
Security Snapshot
The entry point: an executive X-ray of your external exposure in 5-10 business days. Executive report + 30/60/90 roadmap + walkthrough session.
from USD 750View serviceExternal Attack Surface Review
A complete inventory of what your company exposes to the internet: domains, DNS, TLS, services, headers. Findings prioritized by real risk, not noise.
from USD 750View serviceWAF / CDN Security Review
Deep audit of your WAF, CDN and edge: Akamai, Cloudflare, F5, AWS CloudFront, Azure Front Door. Configuration, coverage and gaps.
from USD 1,000View serviceVulnerability Management Starter
We stand up your vulnerability management program: discovery, prioritization, and a remediation process your team can run on its own.
from USD 1,500View serviceFractional Security Architect
Enterprise security-architect judgment, by the hour each month. Decisions, review and direction, without hiring a full-time CISO.
from USD 500/moView serviceTorvex Academy
For people, not companies: 1:1 career coaching to break into and grow in cybersecurity. Guided fundamentals + CV, interviews, career path and personal branding.
from USD 75View serviceSecurity Awareness Training
Your non-technical people are your biggest attack surface. Live phishing and fundamentals workshops: your company’s human firewall.
from USD 500View service
Reference pricing by size and scope. Every assessment runs under written authorization and a defined scope.
Why Torvex, and not a CISO or an MSSP?
An honest comparison. Each option has its place: we tell you which.
| Criterio | Full-time CISO | Generic MSSP | Torvex |
|---|---|---|---|
| Annual cost | USD 100K+ salary and benefits | USD 12-60K, annual contracts | From USD 500/mo, no minimum term |
| Real senior judgment | Yes, if you can hire and retain one | Analysts shared across dozens of clients | Enterprise front line, directly with you |
| Incentive | Aligned with your company | Selling you THEIR platform and renewing the contract | Zero resale: we tell you when NOT to buy something |
| 24/7 monitoring | No: needs to build a team | Yes: their true strength | We don’t sell it. If you need it, we refer you |
| Time to start | 3-6 months of search and hiring | Weeks of onboarding + annual contract | This week. Month to month |
The honest answer: MSSP if you need 24/7 monitoring now · CISO when volume justifies it (and we help you hire them) · Torvex for judgment and direction without the fixed cost.
Founder’s track record
Engagements delivered by Eduardo Solís on the enterprise front line, defending Fortune 500 platforms at internet scale, before founding Torvex. Clients anonymized for confidentiality.
- GLOBAL INDUSTRIAL MANUFACTURER · PARTS E-COMMERCE
Problem. A multi-language catalog of millions of products across a global dealer network: a permanent target for competitive scraping and bots, while staying open to guest buyers.
Engagement. Hardened the production WAF, provided direct security-incident support, and set up + tuned the anti-bot system: what traffic is safe to block, and what must flow.
Outcome. Reinforced defensive posture and a bot-enforcement plan with zero friction for legitimate buyers.
“His product knowledge is second to none.”Client e-commerce operations engineer, in writing
- GLOBAL HOTEL CHAIN
Problem. A high-traffic digital platform facing critical incidents that threatened availability, with technical and executive stakeholders who needed to understand what was happening.
Engagement. Nearly two years as the edge-security point of reference: identifying and resolving critical incidents, communicating clearly at both levels.
Outcome. Critical incidents resolved consistently, year after year.
“Has made a real difference for our team.”Client Sr. Manager, Platform Engineering & Operations
- CONSUMER GOODS MULTINATIONAL · FORTUNE 500
Problem. Migrate all web security from one CDN to another under a two-month contractual deadline, with scope growing from 1,200 to ~3,000 hostnames mid-project.
Engagement. Security architecture for the migration, as part of the security-architect team: like-for-like configuration translation, plus a complex logic change delivered three days before the deadline.
Outcome. ~3,000 hostnames migrated on time, with no loss of security coverage.
We don’t sell fear. We sell clarity, judgment and action.
Fear produces paralysis or unfocused spending. Clarity produces decisions. We tell you what matters, why, and in what order to close it.
About Torvex
Judgment forged defending high-traffic, critical infrastructure.
Torvex is led by Eduardo Solís: front-line security experience at Fortune 500 companies and the global leaders in edge/CDN technology: WAF, bot management, API security, DDoS and attack surface management at internet scale. Based in Costa Rica, serving LATAM and the United States.
Do you know what your company is exposing right now?
The first conversation is free. Tell us your context and we’ll tell you honestly whether a Security Snapshot makes sense for you.
eduardo@torvexsecurity.com+506 7144 2218
Commercial questions
How do you invoice?
We issue Costa Rican electronic invoices (Hacienda) for local clients, and service-export invoices for clients outside CR. Exported services carry no VAT. You always get a valid tax document, wherever you are.
USD or colones?
Both. Reference pricing is in USD; Costa Rican clients can pay the equivalent in colones at the BCCR exchange rate on the invoice date.
Payment methods?
Bank transfer (local or international) and SINPE for Costa Rica. Projects: 50% upfront, 50% on delivery. Individual sessions (Academy) are prepaid via payment link.
Do you sign NDAs?
Yes, before any sensitive information changes hands. We have our own template or we sign yours, whatever your legal team prefers.
Is there a contract?
Always: a services agreement + statement of work with scope, deliverables and written rules of engagement. No assessment starts without signed authorization.
How long does a quote take?
24-48 hours after the 20-minute intro call.