¿En qué se diferencia la ruta simiriki de un consultor tradicional?

La ruta simiriki es productizada: cuatro fases con entregables fijos, precios planos publicados en /precios, y métricas observables desde el día uno. Un consultor tradicional vende horas y entrega un PDF; simiriki vende un sistema operativo que corre sobre tu Microsoft 365 todos los meses.

¿Cuánto dura la implementación completa de las cuatro fases?

La metodología completa toma aproximadamente 16 semanas (P16W) desde diagnóstico hasta operación autónoma. La fase 1 (diagnóstico) se entrega en menos de una hora; las fases 2-4 escalonan los siguientes meses según la madurez inicial del cliente.

¿La metodología requiere reemplazar las herramientas que ya uso?

No. simiriki opera sobre Microsoft 365 (Defender, Sentinel, Purview, Power Platform) que el cliente ya tiene licenciado. La metodología configura, automatiza y mantiene esas herramientas — no las reemplaza ni añade un agente nuevo en endpoints.

¿Qué frameworks de cumplimiento cubre la metodología?

Mapeos explícitos contra LFPDPPP (INAI), CNBV Circular Única, NIST CSF 2.0, ISO 27001 (subset), CIS Microsoft 365 Benchmark, y la línea base CISA SCuBA / ScubaGear que rige a agencias federales de EE.UU. La auditoría de fase 1 entrega evidencia por control para cada framework aplicable al cliente. Mapping rule-por-rule documentado en docs/SCUBAGEAR_MAPPING.md.

¿Qué pasa si simiriki detecta una vulnerabilidad crítica durante la fase de diagnóstico?

Cualquier finding crítico aparece en la entrega de la fase 1 con un playbook de remediación priorizado. Los playbooks ejecutan el cambio sólo con aprobación explícita del cliente — simiriki nunca toma acción autónoma sobre el tenant sin firma humana.

¿Cuántas reglas de detección y playbooks vienen incluidos?

La biblioteca actual son 197 reglas de detección (146 vía Microsoft Graph + 46 vía Azure Resource Manager) y 69 playbooks de remediación. Las reglas están alineadas a CIS Microsoft 365 Benchmark, NIST CSF, CISA CPG y CISA SCuBA / ScubaGear (la línea base de M365 que CISA publica para agencias federales). 14 de las 23 reglas críticas de simiriki mapean directo a una política SCuBA.

Proprietary Methodology

ruta simiriki

How simiriki operates operational infrastructure on your Microsoft 365 — productized, measurable from day one.

Four stages connecting assessment, automation, security, and continuous operation. Each stage has concrete deliverables, a published fixed price, and success metrics observable on your tenant.

Scan Microsoft 365 — 60 sec →See productized pricing

4Structured phases

8–16Weeks typical implementation

12+Executive deliverables

100%7-day refund if we miss delivery

Why a framework

Isolated projects don't transform companies.

Consultancies sell projects — isolated deliverables that treat symptoms, not root causes. simiriki sells software that operates your Microsoft 365 — measurable from day one. Each stage builds on the previous one, and each stage has a published fixed price before you pay.

Who is it for?

Enterprises with complex operations ready to stop improvising.

ruta simiriki is designed for enterprises with complex operations that have established operations but know they're losing time, money, or both to manual processes and unprotected systems. Ideal for CEOs, COOs, and IT leaders who need concrete results — not more slide decks without action.

01Legal firms and notaries handling high document volumes

02Manufacturing and logistics companies with manual approval chains

03Business groups requiring regulatory compliance (LFPDPPP, NOM-151)

04Any mid-sized company that wants to operate like an enterprise

What backs the methodology

This methodology is not an opinion — it is a mapping to public sources

The four phases — Evaluate, Optimize, Protect, Scale — are calibrated against recognised public frameworks. We do not invent the rigor; we inherit it. Every finding, score or recommendation we issue can be traced to a primary source your team or an external auditor can open directly.

CIS · CISAcritical controls are evaluated against CIS Benchmarks for Microsoft 365 and CISA Cross-Sector Performance GoalsCIS · CISA normative publications

NIST CSFthe overall structure aligns with the NIST Cybersecurity Framework — reference language in corporate defenceNIST · Cybersecurity Framework

ISO 27001 · 9001international security and quality management standards guide the Protect and Scale phasesISO · normative publications

LFPDPPP · SATMexican personal-data (INAI) and invoicing (SAT) obligations land in concrete controls, not marketing paragraphsINAI · SAT normative publications

Every rule in the catalogue (197 rules) carries its mapped primary source. If something seems debatable, your team can go straight to the source — not ask us for a spreadsheet.

The 4 phases

From diagnosis to autonomous operation.

01Assess1–2 weeks

Strategic Diagnosis

Complete X-ray of your processes, systems, and security posture. We don't sell solutions before understanding your reality.

From $19,900 MXN

✓Process and workflow audit
✓Digital maturity assessment
✓Security posture analysis
✓Prioritized roadmap with quick wins

Outcome: You know exactly where you stand, what inefficiency costs you, and what the concrete first steps are.

Start assessment →

02Optimize2–6 weeks

Process Automation

We eliminate the manual work consuming your team's time. Power Automate, Power Apps, and dashboards in your existing environment.

From $34,200 MXN

✓Automation of key processes identified in Phase 1
✓Custom Power Apps for your operation
✓Power BI dashboard with real-time metrics
✓Team training roadmap and change management plan

Outcome: Your team stops doing repetitive work. Processes run themselves and you have complete visibility.

See automation options →

03Protect2–4 weeks

Secure Operations

Your processes already run themselves — now we protect them. Microsoft Sentinel and XDR monitoring 24/7 with automated response.

From $15,400 MXN/mo

✓Microsoft Sentinel (SIEM/SOAR) deployment
✓XDR configuration and security policies
✓Automated incident response
✓Regulatory compliance dashboard

Outcome: Automatic threat detection, response in minutes, and continuous regulatory compliance.

See security plans →

04ScaleOngoing

Monitored Operations

Your company operates like a large corporation. Continuous monitoring, proactive optimization, and automated response with expert oversight.

From $20,500 MXN/mo

✓SIEM/SOAR software-operated on Sentinel + Defender XDR; human escalation only for critical incidents (15-min SLA)
✓Continuous automation optimization
✓Proactive threat hunting and executive reports
✓New process and user onboarding at scale

Outcome: Your business scales without friction. Operations and security grow with you.

Explore digital shield →

Productized pricing

Fixed product pricing: from $19,900 MXN (Audit) to $50,000 MXN/mo (S.O.S)

Product, not hours. Fixed price, measurable delivery. Each stage is an independent product with published scope and explicit SLA before you pay. Start with the free scan or the Audit, then activate later stages once the impact is verified.

Essential Path

Phases 1 + 2: Diagnosis and automation

$54K – $216K MXN

3–8 weeks

Complete Path

Phases 1 + 2 + 3: Diagnosis, automation, and security

$240K – $600K MXN/year

5–12 weeks + continuous operation

Full Transformation

All 4 phases: From diagnosis to continuous monitored operations

$500K – $1M+ MXN/year

8–16 weeks + continuous operation

Stages are independent. You can start with the free scan or the Audit and decide later whether to continue. No lock-in contracts.

Your investment protected

Formal commitments, not just words

Microsoft Ecosystem
LFPDPPP Compliance

7-day satisfaction guarantee — full refund if we don't deliver
Formal contract (MSA) with clear terms before you pay
Mutual NDA signed — your information protected from onboarding
Measurable KPIs defined upfront — results, not promises
MSA + product descriptor with published scope and explicit SLA before you pay

Platform capabilities

197 active detection rules
"197 detection rules analyze your tenant and generate findings automatically."
simiriki Platform
Detection engine
69 playbooks
"69 remediation playbooks execute corrective actions with one click and generate before/after evidence."
simiriki Platform
Execution engine
Results in minutes
"From the moment you connect your Microsoft 365, first findings appear in minutes — not weeks."
simiriki Platform
Real-time

* Verifiable platform capabilities. Not client testimonials.

Terms of servicePrivacy policy

Your next step

Start with a diagnosis.
Decide after.

Phase 1 is your risk-free entry point. In 1–2 weeks you know exactly where you stand and what you can improve. No commitment to continue.

Scan Microsoft 365 — 60 sec →

Cargando…

ruta simiriki

Isolated projects don't transform companies.

Enterprises with complex operations ready to stop improvising.

This methodology is not an opinion — it is a mapping to public sources

From diagnosis to autonomous operation.

Strategic Diagnosis

Process Automation

Secure Operations

Monitored Operations

Fixed product pricing: from $19,900 MXN (Audit) to $50,000 MXN/mo (S.O.S)

Essential Path

Complete Path

Full Transformation

Formal commitments, not just words

Start with a diagnosis.Decide after.

ruta simiriki

Isolated projects don't transform companies.

Enterprises with complex operations ready to stop improvising.

This methodology is not an opinion — it is a mapping to public sources

From diagnosis to autonomous operation.

Strategic Diagnosis

Process Automation

Secure Operations

Monitored Operations

Fixed product pricing: from $19,900 MXN (Audit) to $50,000 MXN/mo (S.O.S)

Essential Path

Complete Path

Full Transformation

Formal commitments, not just words

Start with a diagnosis.Decide after.

Start with a diagnosis.
Decide after.

Start with a diagnosis.
Decide after.