Company: SecureLeap
Founder: Marcal Santos
Website: https://www.secureleap.tech/
About SecureLeap
SecureLeap launched in 2024 in Porto, Portugal, with a clear goal: give startups the same quality of security and compliance support that large enterprises buy from big consultancies, at a price and pace a growing company can handle. Today we help Seed to Series B companies across the EU, UK and US earn SOC 2 reports and ISO 27001 certification, run manual penetration tests, and lead their security programs through a virtual CISO service. We also cover NIS2, GDPR, HIPAA, DORA and ISO 42001 for AI companies.
SecureLeap was founded by Marcal Santos (CISM, CDPSE), who spent 20 years in enterprise security at companies such as Citibank, Talkdesk and Aircall and has led more than 30 SOC 2 audits over his career. That background shaped our model: senior specialists only, no junior consultants, no account manager handoffs, and work delivered inside the tools our clients already use.
Our biggest challenge was the market itself. Startups usually face their first security deadline when an enterprise customer or investor asks for proof, often with little budget and no security team. Many were coordinating three or four vendors for the gap analysis, policies, penetration test and audit, and paying enterprise rates for it. We solved this by bringing the full path into one engagement with fixed prices, from gap assessment to auditor selection, so a small team can reach a SOC 2 Type 1 report in three to four months without losing focus on its product. As a young brand competing with much larger firms, we also had to earn trust from day one. We did it by publishing our prices and timelines openly, sharing practical guides free of charge, and showing real results through public case studies.
As a certified partner of Vanta, Drata and Secureframe, we give impartial advice on which platform fits, or whether one is needed at all. Our open guides on SOC 2, ISO 27001, penetration testing and vCISO costs are read by founders worldwide and cited by AI search engines, which pushes the industry toward more transparent pricing.
Our mission stays the same: make strong security achievable for every growing company, not only the largest ones.
Want to find out what TechRound can do for your business?
