ElevenPaths

ElevenPaths
Name	ElevenPaths
Type	Subsidiary
Industry	Cybersecurity
Founded	2013
Founder	Pablo Soto
Headquarters	Madrid
Area served	Global
Parent	Telefónica
Products	Security platforms, threat intelligence, managed services

ElevenPaths ElevenPaths is the cybersecurity unit originally established as the digital security division of Telefónica to provide threat intelligence, risk management, and secure communications. The group developed products and services targeting enterprises, carriers, and public administrations across Europe, Latin America, and North America, collaborating with technology vendors, research centers, and standards bodies. ElevenPaths positioned itself within the ecosystem of cybersecurity firms, intelligence communities, and cloud providers to address malware, mobile security, and identity protection challenges.

History

ElevenPaths was formed in 2013 as part of Telefónica's strategic initiative to expand into cybersecurity, joining other corporate transformation efforts such as those led by José María Álvarez-Pallete. The unit built on experience from earlier Telefónica projects and aligned with regional cybersecurity policies in Spain, European Union directives, and international incident response frameworks influenced by organizations like FIRST and ENISA. Early initiatives included partnerships with universities such as Universidad Politécnica de Madrid and research collaborations with Telefonica I+D teams and labs that had previously worked on mobile platform security. Over time, ElevenPaths expanded its footprint through regional offices and alliances with global cloud platforms including Amazon Web Services, Microsoft Azure, and Google Cloud Platform to deliver managed security services. Leadership changes and corporate reorganizations mirrored broader industry consolidation seen in mergers involving companies like Symantec and McAfee while adapting to regulatory environments shaped by the General Data Protection Regulation.

Products and Services

The portfolio encompassed threat intelligence feeds, managed detection and response, identity protection, secure mobile solutions, encryption tools, and security orchestration platforms. Offerings were designed to interoperate with enterprise technologies from vendors such as Cisco Systems, Palo Alto Networks, Checkpoint Software Technologies, and Splunk. Specific solutions targeted protection for endpoints, networks, cloud workloads, and applications, integrating with orchestration standards promoted by MITRE and leveraging indicators of compromise databases used by VirusTotal and MISP. Services included consulting and incident response engagements comparable to those delivered by firms like KPMG, Deloitte, PwC, and Ernst & Young in cybersecurity advisory practices. For mobile and IoT use cases, the unit worked on secure provisioning and lifecycle management linked to standards from GSMA and device manufacturers such as Samsung and Apple.

Research and Innovation

Research activities produced threat analyses, vulnerability disclosures, and open-source tools contributed to the security community alongside labs such as Kaspersky Lab, ESET, and Trend Micro. Technical reports and whitepapers addressed campaigns attributed to threat actors noted by entities like APT28 and APT29, and examined malware families cataloged by researchers at FireEye and CrowdStrike. ElevenPaths participated in conferences including Black Hat, DEF CON, RSA Conference, and regional events organized by Incibe and OSI to present findings on mobile exploits, cryptographic implementations, and supply chain risks. Innovation programs collaborated with accelerator networks such as Wayra and investor groups to spin out startups in areas overlapping with companies like Darktrace and Cybereason.

Corporate Structure and Ownership

As a business unit housed within Telefónica, the organization operated under the broader governance and compliance frameworks applicable to multinational telecommunications corporations such as Vodafone and Orange S.A.. Reporting lines connected to corporate cybersecurity strategy and regulatory compliance teams that engaged with national authorities including Centro Criptológico Nacional and European regulators. Financial and operational integration drew on parent-company functions including procurement, legal, and global sales similar to structures found at AT&T and Verizon. Ownership ultimately rested with the parent conglomerate, which managed allocations for research funding, market expansion, and talent acquisition in competition with cybersecurity divisions of other telcos.

Partnerships and Clients

Client relationships spanned enterprise accounts, carriers, financial institutions, and public sector bodies alike, aligning with procurement practices seen at banks such as Banco Santander and insurers like Mapfre. Strategic alliances included collaborations with cloud and software vendors—Oracle, SAP, VMware—and platform integrators such as Accenture and Capgemini. Public sector engagements involved work with municipal and national administrations in countries across Latin America and Europe to support critical infrastructure protection and citizen services. The organization also participated in industry consortia alongside companies like Huawei and Ericsson on interoperability and security standards.

Controversies and Security Incidents

Like many entities in the cybersecurity sector, the unit faced scrutiny over vulnerability disclosure timing, data handling practices, and interactions with intelligence stakeholders, topics also raised in debates involving firms such as NSO Group and Hacking Team. Incidents involving misconfigurations or customer deployments have prompted internal reviews comparable to those conducted by Equifax and Yahoo following breaches, and led to strengthened controls and transparency measures aligned with best practices recommended by NIST and ISO standards. Public discourse occasionally referenced regulatory investigations and media coverage similar to reporting on incidents affecting other telecommunications security divisions.

Awards and Recognition

The unit received industry awards and recognition from cybersecurity publications and event organizers paralleling accolades given to peers like Palo Alto Networks and Fortinet. Honors acknowledged contributions to threat research, product innovation, and public-private collaboration, and participation in accelerator and innovation rankings comparable to those from Gartner and Forrester in cybersecurity vendor evaluations.

Category:Cybersecurity companies Category:Telefónica