GAT InfoSec

What GAT InfoSec does

GAT InfoSec is a Brazilian cybersecurity SaaS vendor founded in 2020 and headquartered in São Paulo, serving enterprise security teams through its flagship GAT Core platform. The product is positioned as a Continuous Threat Exposure Management (CTEM) solution that consolidates asset inventories, vulnerability data, third-party risk assessments, pentest coordination, and compliance workflows into a single unified dashboard for CISOs, security managers, and security analysts in Brazil. The company is privately held, reports a headcount in the 11-50 range, and operates primarily in Portuguese for the Brazilian market.

The platform is architected around seven product modules — CAASM (Cyber Asset Attack Surface Management), RBVM (Risk-Based Vulnerability Management), TPRM (Third-Party Risk Management), Pentest Management, Compliance and Security Program, Human Factor Risk, and AppSec — that ingest and normalize data through native connectors to Qualys, Nessus Professional, Tenable, Rapid7 InsightVM, Burp Suite, OpenVAS, BugHunt, Prowler, and Jira Service Desk. GAT Core classifies assets by business criticality, applies risk-based prioritization, and automates remediation workflows, while supporting alignment with LGPD, GDPR, ISO 27001, PCI-DSS, and CIS Controls compliance frameworks. A RESTful API v2.0 (documented in Postman) enables programmatic integration of asset and vulnerability management into customer systems.

GAT InfoSec operates a direct enterprise field-sales motion supported by content marketing (blog, security checklists) and a public Panorama Cibernético attack-surface benchmark covering 1,000+ Brazilian companies. Pricing is quote-based, sold on annual subscriptions, and assisted through WhatsApp consultation. Named enterprise customers span financial services (Alelo, Open Finance Brasil, Serasa Experian), insurance (Fidelidade Seguros), infrastructure (EcoRodovias), agribusiness (ecoagro), loyalty (Dotz), and technology (Trinus, KMM). The only disclosed funding event to date is a $100,000 round from NDA Capital on 2020-06-01.

Name

GAT InfoSec

Legal name

GAT InfoSec

Website

https://gat.digital

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

11–50 employees

Short description

GAT InfoSec is a Brazilian SaaS vendor providing GAT Core, a Continuous Threat Exposure Management platform that centralizes vulnerability, asset, and third-party risk data for enterprise security teams in Brazil.

Ownership category

akta.pro rank

Product category

Cybersecurity Vulnerability Management

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

Keywords

• Continuous threat exposure management
• Vulnerability management platform
• Attack surface management
• Third-party risk management
• Cyber risk governance

Headquarters

HQ city

São Paulo

HQ country

Brazil

HQ region

Latin America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription: Cloud-based platform subscription model for continuous threat exposure management, likely tiered by assets monitored or team size.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

GAT InfoSec sells GAT Core, a cloud-based Continuous Threat Exposure Management (CTEM) platform that centralizes vulnerability data from multiple scanners and third parties, classifies and prioritizes risks based on business impact, manages third-party/supplier cyber risk, coordinates pentests, and supports compliance with frameworks such as LGPD, GDPR, ISO 27001, PCI-DSS and CIS Controls. The platform is delivered as a SaaS subscription aimed at Brazilian enterprise security teams (CISOs, Security Managers, Analysts) and integrates natively with Qualys, Nessus, Tenable, Rapid7, Burp Suite, OpenVAS, BugHunt, Prowler and Jira Service Desk.

Product overview

GAT InfoSec offers GAT Core, a unified CTEM (Continuous Threat Exposure Management) platform composed of multiple integrated modules. The core platform provides a centralized hub for managing cyber risk, vulnerabilities, third-party exposure, and compliance. It is architected as a modular platform where CAASM delivers asset visibility, RBVM provides risk-based vulnerability prioritization, TPRM manages supplier risk, Pentest Management coordinates penetration testing, and Compliance/AppSec/Human Factor modules address governance and process-related risks. The platform integrates natively with multiple vulnerability scanners (Qualys, Nessus, Tenable, Rapid7 InsightVM, OpenVAS, Burp Suite, BugHunt, Prowler) and Jira Service Desk, and exposes a RESTful API v2.0 for custom integrations.

Differentiator

Problem solved

Functional benefit

Brands

• GAT Core: CTEM (Continuous Threat Exposure Management) platform providing unified visibility of attack surfaces, vulnerability management, and third-party risk management.

Products and services

• GAT Core Unified Continuous Threat Exposure Management (CTEM) platform for enterprise security teams that centralizes vulnerability and risk data from multiple scanners, classifies and prioritizes threats based on business impact, manages third-party risk, centralizes pentest results, and supports compliance with LGPD, GDPR, ISO 27001, PCI-DSS and CIS Controls. Delivered as SaaS with RESTful API access and native integrations to Qualys, Nessus, Tenable, Rapid7, Burp Suite, OpenVAS, BugHunt, Prowler and Jira Service Desk.

Quantifiable outcome

• Reduce cyber exposure by up to 94%
• +3 more outcomes

Named customers9 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

AI capability4 records

Feature7 records

Partnerships

Seven partnerships are on record, tiered core.

• QualyscoreTechnology or IntegrationNative connector integration for vulnerability scanning data consolidation into GAT Core platform
• Nessus ProfessionalcoreTechnology or IntegrationNative connector integration for vulnerability scanning data consolidation into GAT Core platform
• Burp SuitecoreTechnology or IntegrationNative connector integration for web application security scanning data consolidation into GAT Core platform
• TenablecoreTechnology or IntegrationNative connector integration for vulnerability scanning data consolidation into GAT Core platform
• Rapid7 InsightVMcoreTechnology or IntegrationNative connector integration for vulnerability scanning data consolidation into GAT Core platform
• Jira Service DeskcoreTechnology or IntegrationNative connector integration for helpdesk synchronization and remediation workflow automation
• GAT Security ScorecoreTechnology or IntegrationInternal security rating tool providing cyber rating data for third-party risk assessment

Scale indicators5 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Axonius: Axonius is the leading CAASM (Cyber Asset Attack Surface Management) platform providing unified asset visibility and security posture management. It is the closest direct functional competitor to GAT InfoSec's CAASM and CTEM modules in the consolidated exposure management category.
• Wiz: Wiz offers a cloud-native security platform that has expanded into broader CTEM functionality including CAASM and exposure management. As one of the fastest-growing cybersecurity companies globally, it competes with GAT InfoSec's CAASM and AppSec modules.
• SecurityScorecard: SecurityScorecard is a leader in security ratings and third-party risk management (TPRM), serving enterprise customers and boards with cyber risk visibility. It directly competes with GAT InfoSec's TPRM module and shares the CISO/board-level value proposition.
• Bitsight: Bitsight provides cyber risk ratings and TPRM/cTPRM (continuous third-party risk management), comparable to GAT's TPRM module. Both companies emphasize board-ready cybersecurity metrics and continuous monitoring of third-party risk.
• Tenable: Tenable is a global vulnerability management and exposure management platform with Nessus and Tenable One CTEM offering. It directly competes with GAT InfoSec's RBVM and CAASM modules, integrating with the same scanner ecosystem (e.g., Rapid7, Qualys) and serving enterprise CISOs.
• Rapid7: Rapid7 InsightVM provides risk-based vulnerability management with similar prioritization capabilities to GAT InfoSec's RBVM. As one of GAT's integration partners, Rapid7 represents both a complement and a competitive threat in the RBVM/CTEM market.
• Qualys: Qualys provides VMDR (Vulnerability Management, Detection and Response) and Enterprise TruRisk Management for CTEM. It is a foundational vulnerability scanning vendor that GAT InfoSec integrates with natively, but also a direct competitor as it expands its platform into consolidated exposure management.
• Balbix: Balbix provides an AI-powered CTEM platform with risk-based vulnerability management and asset intelligence capabilities. It is a direct competitor to GAT InfoSec's unified CTEM positioning and consolidated dashboard approach.

Broad incumbents

• CrowdStrike: CrowdStrike's Falcon platform includes Falcon Surface (CAASM) and broader exposure management capabilities as part of a comprehensive endpoint-to-cloud security portfolio. It competes with GAT InfoSec's CAASM modules while offering a much wider product breadth.
• ServiceNow Integrated Risk Management: ServiceNow offers Integrated Risk Management (IRM) modules including VRM (Vulnerability Response) and TPRM as part of its broader enterprise workflow platform. It competes with GAT InfoSec as a broad incumbent that customers may choose for consolidated GRC workflows.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/GATInfoSec
• Facebookfacebook.com/GATInfoSec
• LinkedInlinkedin.com/company/GATInfoSec

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about GAT InfoSec