ZIUR's groundbreaking Lab Reaches 387 Companies on its Fifth Anniversary
“It is a clear example of Gipuzkoa’s commitment to becoming a regional and international benchmark in the field of industrial digital security”, said the Deputy for Economic Promotion and Strategic Projects of Gipuzkoa.
The advanced laboratory of ZIUR —the Industrial Cybersecurity Center of the Provincial Council of Gipuzkoa— is celebrating its fifth anniversary, during which it has already supported 387 companies across the territory in strengthening their digital security capabilities.
“This laboratory clearly reflects the commitment we are making as a territory to position ourselves as a regional and international reference in industrial cybersecurity”, said Unai Andueza, Deputy for Economic Promotion and Strategic Projects of Gipuzkoa.
The facility is aimed at industrial companies in Gipuzkoa, manufacturers linked to the cybersecurity sector —both industrial product developers and security solution providers— as well as technology and knowledge centers.
Since its creation, ZIUR has consolidated its role as a trusted partner for Gipuzkoa’s industrial sector in its digital transformation process, helping companies navigate and manage emerging threats in an increasingly digital environment. “Our goal was to strengthen Gipuzkoa’s capabilities in industrial cybersecurity and reinforce our international positioning, and ZIUR is clearly contributing to this effort”, Andueza added.
Core infrastructure for industrial cybersecurity testing
The Industrial Cybersecurity Laboratory is the core infrastructure of ZIUR. It enables cybersecurity testing and experimentation on industrial components, systems, processes and technologies that may be exposed to cyberattacks.
The facility is designed as a collaborative space for companies and industry stakeholders, capable of replicating real industrial systems, networks and processes to generate highly realistic simulation environments.
Between 2021 and 2025, the laboratory has involved 387 companies, reflecting the growing interest of the industrial ecosystem in strengthening digital resilience.
Experimentation, assessment and training services
ZIUR offers a wide range of experimentation, assessment and training services, including:
- Breach and Attack Simulation exercises
- ICS cybersecurity audits
- Automated pentesting
- Data leak monitoring
- Cybersecurity assessment during the design of industrial products (machine tools, IoT, automotive and medical devices)
- Advanced and gamified training in incident response
These services aim to:
- Assess companies’ cybersecurity maturity levels
- Identify attacker profiles and attack typologies targeting industry
- Help companies prepare for and respond to cyber incidents
- Support regulatory compliance, including the upcoming Cyber Resilience Act (CRA)
- Promote training and awareness among technical teams and executives
- Facilitate the evaluation of market solutions and secure OT architectures
- Sustain growth in advisory and training services
Growing demand for cybersecurity advisory services
Since 2020, ZIUR’s cybersecurity advisory service has been used by 205 companies, including microenterprises, SMEs and large industrial firms. In 2024 alone, 58 companies were supported, confirming a growing trend.
According to ZIUR’s director María Penilla, this increase reflects a broader shift in the industrial sector: “The growing number of companies using this advisory service shows that the business community is increasingly aware of the strategic importance of cybersecurity. More organizations now understand that protecting their systems and processes is essential to ensuring competitiveness and resilience in an increasingly digitalized industrial environment".
Extensive training activity
Alongside its advisory work, the Foundation has also developed an extensive training programme:
- 113 training workshops between 2020 and 2025
- More than 1,000 participating companies
- Nearly 1,260 professionals trained
- More than 1,800 awareness activities aimed at both technical teams and executives, strengthening cybersecurity culture across the industrial ecosystem.