What Kryptus does

Kryptus S.A. EED is a privately held Brazilian multinational founded in 2003 in Campinas, São Paulo, that develops and deploys cryptographic hardware, embedded cybersecurity modules, and managed security services for mission-critical applications. The company's technical core is the BruitBlanc ecosystem — centered on the kNET HSM (capable of 10,000 RSA-2048 signatures per second with up to 50 virtual HSM partitions, certified FIPS 140-3 Level 3 and Common Criteria EAL4+), the Cloud HSM, the CommGuard network encryptor, and the KeyGuardian portable cryptographic token — all of which support NIST-standardized post-quantum algorithms (ML-KEM, ML-DSA) in production since 2024. Beyond commercial HSM products, Kryptus designs sovereign defense systems including the CM4-B Criptocomputador (PED-designated, integrated into Embraer's SABER M200 radar), the Link-BR2 tactical datalink cryptography for the Brazilian Air Force, the SatVHR satellite cybersecurity layer, and the Tentacles cyber intelligence platform for the Federal Police.

The company operates a mixed revenue model combining hardware sales (HSM appliances, network encryptors, KeyGuardian tokens), subscription and as-a-service recurring revenue (Cloud HSM, Virtual HSM for PSTI multi-tenancy, managed SOC), and professional services (LGPD compliance consulting, penetration testing, strategic cybersecurity services). Go-to-market is primarily direct enterprise field sales supported by a tiered partner program (FINDER and VAR with Silver/Gold/Platinum levels), targeting government, defense, financial, and critical infrastructure buyers across Brazil, LATAM, EMEA, and selectively North America. Key customers include the Brazilian federal government (Gov.BR processes 600,000+ digital signatures daily through kNET HSM serving 130M+ citizens), the Brazilian Air Force, Embraer, Banco Central do Brasil, Febraban, and the Federal Police. The company holds the EED (Empresa Estratégica de Defesa) designation and operates the LabSCA side-channel analysis laboratory, unique in Latin America. Kryptus is led by founder-CEO Roberto Gallo and has 101–250 employees.

Name

Kryptus

Legal name

Kryptus S.A. EED Criptografia, Cibersegurança, Proteção de Dados

Website

https://kryptus.com

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

101–250 employees

Short description

Kryptus is a Brazilian-founded (2003) multinational that designs certified hardware security modules, post-quantum cryptography, and sovereign defense cybersecurity for government, defense, financial, and critical infrastructure clients across Brazil, LATAM, and EMEA.

Ownership category

akta.pro rank

Product category

Cryptographic Hardware Security

NAICS

Security Systems Services (56162), Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371), Instruments For Meas & Testing Of Electricity & Elec Signals (3825)

akta.pro primary industry

Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)

akta.pro secondary industries

Quantum-Safe Cryptographic Algorithms & Protocols (PQC) (HDAGAGAC), Quantum-Safe PKI, Key Management & HSMs (HDAGAGAE), Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ), POS Security, Encryption & Key Management (P2PE, HSM, Key Injection) (FSAMADAK), Secure Communications & Encryption for Utility Networks (VPN, PKI, Key Management) (EUADANAG), Secure Elements & Trusted Execution Processors (TPM/TEE/Crypto MCUs) (HDAHAJAK)

Keywords

• Hardware security modules
• Cryptographic key management
• Network encryption appliances
• Post-quantum cryptography
• Defense cybersecurity solutions

Headquarters

HQ city

Campinas

HQ country

Brazil

HQ region

Latin America

Offices1 record

Markets served

GTM type

B2B

Offering type

Hardware or Manufacturing

Cost components

Technology or R&D, Personnel, Supply Chain, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Hardware Security Modules (HSM): Sale and deployment of hardware cryptographic modules (kNET HSM, KMS HSM, Cloud HSM) providing cryptographic key protection, PKI management, and compliance for financial institutions, government, and defense clients.
2. Network Encryption Solutions: CommGuard network encryptors providing secure VPN and IP traffic protection for organizations requiring classified communications.
3. Managed Security Services: SOC services including continuous monitoring, threat detection, incident response, and managed security offerings for organizations without internal security operations capability.
4. Cybersecurity Consulting: Strategic cybersecurity services, 360-degree assessments, penetration testing, LGPD compliance consulting, and security architecture reviews.
5. Cryptographic Devices: KeyGuardian portable cryptographic devices and tokens providing endpoint security and authentication for field operations.
6. Cloud HSM (HSM as a Service): HSM services delivered in cloud environments with scalability, availability, and cost-efficiency.
7. PSTI Compliance Solutions: Solutions enabling financial institutions and PSTIs to comply with BACEN resolutions 496, 497, 498 through HSM-based key protection and Virtual HSM multi-tenant offerings.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Kryptus designs, manufactures, and integrates hardware security modules (HSMs), network encryptors, portable cryptographic tokens, and embedded cryptocomputers for enterprise, government, financial, and defense organizations. The company also provides managed cybersecurity services (SOC, 24/7 monitoring, incident response), strategic security consulting, and compliance services (pentesting, 360° assessments, LGPD consulting) backed by international certifications (FIPS 140-3 Level 3, Common Criteria EAL4+, ICP-Brasil) and integrated post-quantum cryptography (ML-KEM, ML-DSA).

Product overview

Kryptus is a Brazilian multinational offering a multi-layered portfolio of cryptographic, cybersecurity, and strategic defense solutions. The core portfolio is organized around the BruitBlanc ecosystem — a unified suite combining the kNET HSM (hardware security module for cryptographic key generation, management, and protection), the KMS HSM (key management system), the Cloud HSM (cloud-delivered HSM), the CommGuard CG Network Encryptor (for protecting data-in-transit with post-quantum key exchange), and the KeyGuardian portable cryptographic token (for endpoint security with embedded OTP and ML-KEM). Beyond the BruitBlanc suite, Kryptus provides managed cybersecurity services including a 24/7 SOC, managed security services, strategic cybersecurity services, 360-degree security assessments, penetration testing, LGPD compliance consulting, and Cyber Range simulation training. Application-specific solutions span PKI, financial payments (PIX/SPB), database protection, government, defense strategic projects (Criptocomputador CM4-B, Link-BR2, Typhon, SatVHR), Industry 4.0, critical infrastructures, and telecommunications. The company also operates LabSCA, a unique Latin American side-channel analysis laboratory, and develops the Tentáculos platform for Brazilian Federal Police cyber intelligence.

Differentiator

Problem solved

Functional benefit

Brands

• kNET HSM: Hardware Security Module for cryptographic key management and protection
• KMS HSM
• Cloud HSM
• BruitBlanc Suite
• CommGuard Network Encryptor
• KeyGuardian
• SOC
• Cyber Range
• Typhon
• CM4-B Criptocomputador

Products and services

• kNET HSM Flagship Hardware Security Module providing cryptographic key generation, management, protection, and use. Serves as root of trust for PKI and critical applications with up to 10,000 RSA 2048-bit signatures per second, up to 50 virtual HSM partitions for multi-tenancy, and post-quantum algorithm support (ML-DSA, ML-KEM). Common Criteria EAL4+ and FIPS 140-2/3 Level 3 certified.
• KMS HSM Key Management System providing the strategic core for managing and protecting cryptographic keys in critical environments. Offers integrity and confidentiality foundation serving as central authority for cryptographic key lifecycle management.
• Cloud HSM HSM delivered as a cloud service providing on-premise-equivalent security adapted for cloud environments. Offers scalability, availability, and cost reduction for organizations requiring cryptographic key management in virtual environments.
• BruitBlanc Suite Comprehensive cryptographic solutions suite combining kNET HSM, CommGuard, and KeyGuardian for ultra-secret, unbreakable, and personalized communications. Forms an end-to-end quantum-resistant ecosystem protecting data at-rest, in-transit, and at endpoints.
• CG Network Encryptor (CommGuard) High-performance network encryptor for creating secure VPNs and protecting all IP traffic between headquarters, distributed sites, and remote field operations. Supports ML-KEM for quantum-resistant key exchange with hybrid (PQ/traditional) key exchange modes for transition phases.
• KeyGuardian (KG Token Criptográfico)
• SOC - Security Operations Center Managed security operations center providing continuous monitoring and proactive response to cyber threats with 24/7 coverage, threat intelligence correlation, and incident response for organizations needing operational defense without building internal high-cost infrastructure.
• Serviços Gerenciados de Segurança (Managed Security Services) Managed security services providing comprehensive cybersecurity coverage for diverse sectors, essential for digital-era sustainability and regulatory compliance.
• Serviços Estratégicos de Cibersegurança (Strategic Cybersecurity Services) Strategic cybersecurity services guaranteeing secure environments adapted to diverse sectors, including security architecture reviews, compliance consulting, and customized cybersecurity strategies.
• Avaliação 360° (360° Security Assessment) 360-degree security assessment ensuring safe environments through risk assessments, vulnerability testing, and compliance reviews. Provides a comprehensive view enabling organizations to improve resilience against cyber threats.
• Pentest (Penetration Testing) Penetration testing service identifying vulnerabilities in computers, networks, and data using advanced assessment tools and manual testing. Evaluates threat exposure and generates KPIs for governance, repair recommendations, and preventive measures.
• Consultoria em LGPD LGPD (Brazil's General Data Protection Law) compliance consulting providing a step-by-step guide to protect organizations against fines, reputational damage, and other harmful consequences, ensuring proper handling of personal data.
• Cyber Range Simulation platform offering hands-on exercises for cybersecurity specialists, promoting readiness and efficiency in incident response. Features a comprehensive laboratory creating an authentic environment to maximize organizational cyber resilience.
• CM4-B Criptocomputador Cryptocomputer developed in partnership with IAE for the IFF Mode 4 Nacional (IFFM4BR) project. Designated PED (Strategic Defense Product) by the Ministry of Defense. Critical for airspace security and control, employing national cryptographic algorithms and key management systems immune to electronic warfare attacks. Integrated into Embraer's SABER M200 radar.
• Strategic Defense Projects (Projetos Estratégicos) Strategic defense project offerings including proprietary algorithms, secure communications, Criptocomputador development, on-demand development, communication networks, SIC infrastructure review, and surveillance/monitoring. Delivers cybersecurity for national sovereignty in the defense market with customizable solutions integrating hardware, software, and services.
• Typhon - Autonomous Intelligent Cyber Defense System First autonomous intelligent Brazilian cyber defense system selected for development by Kryptus. Part of Brazil's strategic defense initiatives.

Quantifiable outcome

• 600,000+ digital signatures processed daily on Gov.BR infrastructure
• +3 more outcomes

Named customers12 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature15 records

Partnerships

15 partnerships are on record, tiered core and minor.

• FebrabancoreStrategic or Co-development Partner · 1 December 2025Partnership for Tentacles Project - new generation platform for financial system protection. Combines Federal Police investigative capabilities, Febraban sector coordination, and Kryptus technological expertise to combat organized crime.
• Polícia FederalcoreStrategic or Co-development Partner · 1 December 2025Host institution for Tentacles Platform developed by Kryptus and Febraban. Using Brazilian cyber intelligence for big data analysis, advanced investigation, and National Financial System protection.
• Instituto Nacional de Tecnologia da Informação (ITI)coreStrategic or Co-development Partner · 1 December 2025Partnership for first post-quantum cryptography signature test for AC-Raiz (Root Certification Authority). Kryptus and ITI conducted test of post-quantum signature technology to be adopted by Brazil's Root CA.
• Universidade de São Paulo (USP) - LARCcoreStrategic or Co-development Partner · 1 September 2025Partnership with LARC (Laboratório de Arquitetura e Redes de Computadores) at Escola Politécnica for Side-Channel Analysis research. Kryptus provides LabSCA access to USP researchers for advanced cryptographic security studies.
• Instituto de Aeronáutica e Espaço (IAE)coreStrategic or Co-development Partner · 1 April 2025Partnership with IAE for development of Criptocomputador CM4-B for IFF Mode 4 National (IFFM4BR) system. CM4-B designated as PED (Strategic Defense Product) and integrated into Embraer's SABER M200 radar.
• Visiona EspacialcoreStrategic or Co-development Partner · 1 January 2025Consortium leader for SatVHR satellite project - first optical Earth observation satellite with integral national design. Kryptus provides post-quantum cryptography and cybersecurity layer for space-to-ground communications. Won Finep 2025 Innovation Award.
• EmbraercoreStrategic or Co-development Partner · 1 January 2025Embraer Defense & Security joint venture with Telebras controlling Visiona. Integration of Kryptus Criptocomputador CM4-B into SABER M200 radar under development for Brazilian Ministry of Defense.
• Equatorial SistemasminorStrategic or Co-development Partner · 1 January 2025Co-executing partner in SatVHR satellite consortium for sovereign Earth observation satellite development.
• FibraforteminorStrategic or Co-development Partner · 1 January 2025Co-executing partner in SatVHR satellite consortium for sovereign Earth observation satellite development.
• OPTO Space and DefenseminorStrategic or Co-development Partner · 1 January 2025Co-executing partner in SatVHR satellite consortium contributing optical space and defense expertise.
• Instituto Nacional de Pesquisas Espaciais (INPE)minorStrategic or Co-development Partner · 1 January 2025Research institution partner in SatVHR satellite consortium providing space research expertise.
• Instituto Tecnológico de Aeronáutica (ITA)minorStrategic or Co-development Partner · 1 January 2025Academic partner in SatVHR satellite consortium providing aerospace engineering expertise.
• Google CloudminorGTM or Marketing Partner · 1 January 2025Joint presence at Gartner Security & Risk Management Conference 2025, promoting cybersecurity and data protection solutions.
• TelebrasminorStrategic or Co-development Partner · 1 January 2025Parent company of Visiona Espacial joint venture with Embraer Defense & Security. Partner in SatVHR satellite project for sovereign satellite capabilities.
• AEL SistemascoreStrategic or Co-development Partner · 1 August 2024Strategic partner for Link-BR2 datalink project, executing development and integration of national tactical data link system for Força Aérea Brasileira. Kryptus develops all communication protocols and information security layer including cryptographic boards for airborne radios and ground systems.

Scale indicators9 records

Recent moves7 records

Expansion highlights6 records

Emerging players

• PQShield: PQShield is a UK-based post-quantum cryptography specialist offering PQC IP, software libraries, and HSM/PKI integration, with NIST-standardized algorithm implementations. It is a comparable emerging player focused on PQC migration, partnering with HSM vendors and security platforms rather than building full HSM hardware — directly adjacent to Kryptus's PQC-first go-to-market.

Direct peers

• Futurex: Futurex is a direct HSM competitor focused on payment HSMs, key management, and cloud HSM services for financial institutions and enterprises, with FIPS 140-2 Level 3-validated hardware. It overlaps closely with Kryptus's payment-focused kNET HSM and Virtual HSM offerings for PSTI/BACEN compliance.
• Entrust: Entrust is a direct competitor offering nShield HSMs alongside PKI, identity, and digital signing solutions, with a comparable certification profile (FIPS 140-2 Level 3) and deep presence in financial, government, and enterprise PKI deployments. Entrust directly overlaps with Kryptus in PKI, digital signatures, and payment HSM use cases.
• Utimaco: Utimaco is a direct competitor in enterprise and payment HSMs, with FIPS 140-2 Level 3 and Common Criteria-certified HSMs serving financial institutions, governments, and critical infrastructure globally. It offers a similar portfolio of on-premise HSMs, key management, and post-quantum readiness, and competes with Kryptus in regulated financial and government accounts.
• Securosys: Securosys is a Swiss-based HSM specialist offering Primus HSMs, SKN (Secure Key Management), and a cloud HSM service for financial institutions, governments, and industrial use cases, with strong FIPS/CC certification. It is a comparable niche specialist competing for the same regulated customer profile.

Broad incumbents

• AWS CloudHSM: AWS CloudHSM is a cloud-delivered HSM service based on Marvell/LiquidSecurity hardware, offering FIPS 140-2 Level 3-validated key management as a managed service. It competes with Kryptus's Cloud HSM and Virtual HSM offering for cloud-native and fintech customers seeking pay-as-you-go HSM economics.
• Microsoft Azure Dedicated HSM: Azure Dedicated HSM is Microsoft's managed HSM service providing FIPS 140-2 Level 3-validated key storage and cryptographic operations for Azure-hosted workloads. Kryptus already integrates with Microsoft AD CS / Windows Server 2025 and SymCrypt for post-quantum operations, and Azure HSM is the primary alternative for customers standardizing on Microsoft infrastructure.
• IDEMIA: IDEMIA is a global identity and security provider with significant presence in government digital ID, payment, and cryptographic infrastructure including HSMs and PKI. It competes with Kryptus in sovereign government digital identity and PKI deployments across emerging markets.
• Atos (Evidian/Bull Trustway): Atos's Evidian cybersecurity business includes Bull Trustway HSMs, a legacy European HSM product line serving defense, government, and financial customers with CC and FIPS certifications. Atos overlaps with Kryptus in European defense and government opportunities, particularly in EMEA where Kryptus is building presence.
• Thales (TCT): Thales's Trusted Cyber Technologies (TCT) division is the global HSM and key management market leader via the Luna HSM product line, with FIPS 140-3 and Common Criteria certifications comparable to Kryptus's kNET HSM. Thales competes broadly across payments, government, and defense globally, with a much larger channel and enterprise footprint.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/kryptus1
• Facebookfacebook.com/kryptus.sa

Compliance20 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kryptus