CAPTOR focused on advanced system threats, SAURON on protecting European ports, and CyberSANE on critical infrastructure incident handling.
S2 GRUPO SOLUCIONES DE SEGURIDAD SL
Spanish cybersecurity SME specializing in critical infrastructure protection, incident response, and IoT privacy for European security projects.
Their core work
S2 Grupo is a Spanish cybersecurity company based in Valencia that specializes in protecting critical information infrastructures, incident response, and threat detection. They develop security solutions for European ports, industrial systems, and other critical infrastructure, combining machine learning with traditional cyber defense approaches. Their work spans from capturing advanced persistent threats to building scalable situational awareness platforms for complex operational environments.
What they specialise in
CAPTOR targeted advanced persistent threats capture, while CyberSANE built warning and response systems for cyber incidents.
CyberSANE explicitly lists machine learning as a core technology for cyber threat detection.
A-WEAR network addresses privacy constraints in dynamic wearable applications with edge/cloud computing.
SAURON developed scalable multidimensional situational awareness for port protection, their largest funded project (EUR 641K).
How they've shifted over time
S2 Grupo started with a tightly focused cybersecurity profile — their 2014 CAPTOR project dealt specifically with capturing advanced system threats, and they coordinated it themselves as an SME Phase 1 effort. By 2017-2019, they expanded into larger consortium work on critical infrastructure protection (SAURON, CyberSANE) while also branching into adjacent domains like wearable privacy and edge computing through A-WEAR. The trajectory shows a company moving from pure cyber threat detection toward broader infrastructure security and privacy-aware IoT — diversifying their technical base while keeping security at the core.
S2 Grupo is expanding from traditional cybersecurity into IoT/edge security and privacy-by-design, positioning them well for projects combining physical infrastructure protection with connected device security.
How they like to work
S2 Grupo has acted mostly as a participant or third party (3 out of 4 projects), with one coordinator role in a small SME Instrument project. They are comfortable in large consortia — 44 unique partners across 16 countries in just 4 projects indicates they join sizable, multi-national teams. This profile suggests a specialist contributor that brings focused cybersecurity expertise to broader projects rather than driving the research agenda.
Despite only 4 projects, S2 Grupo has built a remarkably wide network of 44 partners across 16 countries, reflecting their participation in large security-focused consortia. Their geographic spread covers much of the EU, with no visible concentration beyond their Spanish base.
What sets them apart
S2 Grupo brings a relatively rare combination: a private SME with deep cybersecurity expertise that has hands-on experience protecting real-world critical infrastructure like ports. Unlike academic security groups, they come from operational security backgrounds, which makes them practical partners for projects that need deployable solutions rather than theoretical frameworks. Their growing capability in IoT privacy and edge computing security adds versatility that pure cybersecurity firms often lack.
Highlights from their portfolio
- SAURONLargest funded project (EUR 641K) focused on protecting European ports — a concrete, high-stakes critical infrastructure application.
- CAPTORTheir only coordinator role and an SME Instrument Phase 1 project, signaling their core identity as an advanced threat detection company.
- CyberSANECombines cybersecurity with machine learning for European critical infrastructure — represents their most technically advanced security work.