What Tempest does

Tempest, legally Tempest Serviços de Informática S.A., is a Brazilian-headquartered cybersecurity company founded in 2000 in Recife and self-described as the largest specialized cybersecurity firm in Brazil. The company operates from three offices (Recife as headquarters, São Paulo since 2004, and London since 2013) and serves enterprise clients in Brazil, LATAM, and Europe, with vertical concentration in financial services, e-commerce and retail, healthcare, industrial, and (post-2020) defense and aerospace. Tempest has accumulated 500+ customers and 1,000+ executed security projects, with a current headcount of 400+ professionals including 50+ dedicated pentest specialists and 60+ AI security testing specialists.

The company delivers an end-to-end portfolio organized into three pillars: Security Consulting (Pentest, Security Advisory, AI Security Test, Application Security, Cloud Security, and Offensive Security with Red Team capabilities), Managed Security Services (SOC in three tiers, Security Technology Management, and GVC vulnerability and compliance management), and Threat Intelligence (the Resonant platform, Takedown, Intel Feeds with REST API delivery to Splunk/QRadar/McAfee, and CTI Strategic Reports). Core technology relies on a Google Security Operations partnership (SIEM + SOAR powered by Google Gemini AI) for the Intelligence Driven SOC, a Frontline Vulnerability Manager platform for vulnerability management, manual-driven pentest methodology with proprietary tooling, and a broad technology integration stack spanning CrowdStrike, IBM, Splunk, Tenable, Zscaler, Cloudflare, and 15+ other vendors. The company holds expertise in LGPD, GDPR, ISO 27001, and PCI DSS compliance frameworks and publishes daily content through its Cyber Morning Call podcast, Tempest Trends blog, and Side Channel technical research blog.

Tempest's revenue model combines project-based professional services (consulting engagements, security assessments, AI security tests), recurring managed services (MSS contracts, ongoing vulnerability management), and subscription-based threat intelligence (Intel Feeds and CTI reports). Distribution is enterprise-led direct field sales with no self-service or e-commerce channels, supplemented by content marketing and a broad technology partner ecosystem. The company received strategic investment from Embraer's aerospace fund (FIP) in 2017 and 2020, with the latter round described as one of the largest cybersecurity investments in Latin American history, and has executed M&A including the 2018 acquisition of EZ-Security (which established its market leadership position) and the 2019 divestiture of the El Pescador training business to KnowBe4. Leadership is held by co-founder and CEO Cristiano Lincoln Mattos alongside co-founder Evandro Hora and partner and sales director Ada Rosenfeld.

Name

Tempest

Legal name

Tempest Serviços de Informática S.A.

Website

https://tempest.com.br

Company type

Private

Founded year

2000

Operating status

Operating

Headcount range

101–250 employees

Short description

Tempest is Brazil's largest specialized cybersecurity company, providing security consulting, managed security services, and threat intelligence to enterprise clients across financial, retail, healthcare, industrial, and defense sectors in Brazil, LATAM, and Europe.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Threat Intelligence Services (BPAEADAC), Enterprise Security Strategy & Program Advisory (BPAKADAA), Incident Response & Case Management (HDADAGAF)

Keywords

• Penetration testing services
• Managed security services
• Threat intelligence platforms
• Cybersecurity consulting
• Vulnerability management

Headquarters

HQ city

Recife

HQ country

Brazil

HQ region

Latin America

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Security Consulting: Professional consulting services including pentest, security advisory, AI security testing, application security, cloud security, and offensive security. Delivered through project-based engagements with detailed reporting and executive presentations.
2. Managed Security Services (MSS): Continuous monitoring and security management services including SOC, STM (Security Tool Management), and GVC (Vulnerability and Risk Management). Ongoing service with continuous support and response.
3. Threat Intelligence: Intelligence products including Takedown, Intel Feeds (automated IOCs), and CTI Strategic Reports delivered through subscriptions and feeds for automated consumption.
4. Integration Services: Technology integration services combining monitoring, defense, and analysis tools for complete protection using partner technologies from leading manufacturers.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Tempest is Brazil's largest specialized cybersecurity company delivering an end-to-end portfolio of 70+ solutions organized into three pillars: Security Consulting (Pentest, Security Advisory, AI Security Test, Application Security, Cloud Security, Offensive Security with Red Team), Managed Security Services (24/7 SOC on Google SecOps with Gemini AI, Security Technology Management, and Vulnerability & Compliance Management via the Frontline platform), and Threat Intelligence (Takedown rapid content removal, Intel Feeds via REST API, CTI Strategic Reports, and the Resonant brand protection platform). It serves 500+ enterprise clients across Brazil, LATAM, and Europe, primarily in financial services, retail/e-commerce, healthcare, industrial, and defense/aerospace verticals.

Product overview

Tempest is Brazil's largest specialized cybersecurity company offering an end-to-end cybersecurity portfolio with over 70 solutions. The portfolio is organized into three main pillars: (1) Security Consulting covering offensive services like Pentest, AI Security Test, Application Security, Cloud Security, and Offensive Security with Red Team capabilities; (2) Managed Security Services (MSS) including SOC (Intelligence Driven SOC with Google SecOps and Gemini AI), STM (Security Technology Management), and GVC (Vulnerability & Compliance Management); and (3) Threat Intelligence featuring Takedown for brand protection, Intel Feeds for automated IOC delivery via REST API to SIEM platforms, CTI Strategic Reports, and the Resonant threat intelligence platform. Supporting offerings include content services (Security Maturity Simulator, Cyber Morning Call podcast, Tempest Trends blog, Side Channel technical blog) delivered through the Prospero Suite platform.

Differentiator

Problem solved

Functional benefit

Brands

• Resonant: Threat Intelligence product offering from Tempest for discovering and monitoring digital threats.
• Cyber Morning Call
• Tempest Trends
• Side Channel
• Prospero Suite

Products and services

• Pentest Penetration testing service that simulates cyberattacks to identify security vulnerabilities, with 80% of work executed manually by specialists for deep and creative detection across a wide range of environments.
• Security Advisory Strategic cybersecurity consulting that helps companies identify vulnerabilities and strengthen defenses through risk assessment, compliance alignment (LGPD, GDPR, ISO 27001, PCI DSS), and security strategy development.
• AI Security Test Specialized security testing for Generative AI using Red Team methodology adapted for AI challenges, simulating adversarial attacks including jailbreaking and prompt injection to identify AI vulnerabilities.
• Application Security Application security consulting including threat modeling, secure development workshops, source code review, and software architecture review to identify and mitigate vulnerabilities across web and mobile applications.
• Cloud Security Cloud security services covering Cloud Security Review, Cloud Security Compliance Assessment, Cloud Security Consulting, Secure IaC Review, Shadow IT Assessment, and Cloud Security Workshops.
• Offensive Security Proactive cybersecurity approach including Red Team simulations, Vulnerability Assessment, APT (Advanced Persistent Threat) Simulation, Spear Phishing campaigns, and Pentest services to identify and remediate vulnerabilities.
• SOC (Security Operations Center) 24/7 security monitoring and protection service available in three tiers: SOC WARNING (observability-focused), SOC MSS (SIEM/SOAR-powered managed service), and ID SOC (Intelligence Driven, Modern SOC with governance and threat hunting). Built on Google Security Operations with Gemini AI.
• STM (Security Technology Management) Security tool management service covering Professional Service (installation, configuration, migration), Policy Management (continuous monitoring and policy adjustment), and multi-vendor technology management for optimal security efficiency.
• GVC (Vulnerability & Compliance Management) Vulnerability and compliance management with five components: vulnerability detection, risk assessment, recommendations, continuous monitoring, and reporting, using the Frontline Vulnerability Manager platform for scanning and compliance auditing.
• Takedown Rapid removal service for malicious content including phishing URLs, malware sites, fake social media profiles, malicious mobile apps, and brand abuse, initiating notifications to hosting providers within 2 hours.
• Intel Feeds Automated threat intelligence feeds providing contextualized IOCs (IPs, URLs, domains, hashes) through REST API integration with platforms like Splunk, IBM QRadar, and McAfee Active Response, including specialized LATAM threat intelligence.
• CTI Strategic Reports Strategic cyber intelligence reports including No Radar (daily newsletter), TCA (extraordinary cybersecurity alerts), Situation Report (weekly analysis), and Threat Landscape (monthly comprehensive report).
• Resonant Threat Intelligence product focused on proactive digital brand protection and digital threat monitoring.

Quantifiable outcome

• 45% revenue growth in 2021 despite economic challenges
• +3 more outcomes

Named customers4 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability11 records

Feature6 records

Partnerships

Two partnerships are on record, tiered core.

• Google CloudcoreTechnology or IntegrationOfficial Google partner providing SOC services powered by Google Security Operations (Google SecOps), including AI capabilities from Google Gemini, SIEM + SOAR integration, and Google Cloud platform infrastructure. Tempest uses Google technology for threat detection, hunting, and security operations.
• EZ-Security (Acquired)coreStrategic or Co-development PartnerAcquired in 2018. One of the main companies in Brazil for technology product integration in cybersecurity. Founded in 1999, served clients in Brazil and Latin America, solidified as a leader in Symantec and McAfee businesses. Created the largest specialized cybersecurity company in Brazil.

Scale indicators10 records

Recent moves11 records

Expansion highlights7 records

Direct peers

• Trustwave: Global managed security services provider offering MDR, SOC, threat intelligence, and consulting services. Closely comparable business model to Tempest across consulting, MSS, and threat intel — both target enterprise clients with multi-pillar cybersecurity portfolios.
• ReliaQuest: Enterprise MDR and SOC provider with strong threat intelligence and integration story (similar to Tempest's Intel Feeds and Google SecOps approach). Targets similar enterprise buyer with multi-tool security environments.
• Clavis Segurança da Informação: Brazilian cybersecurity services firm offering consulting, managed security, and threat intelligence. One of Tempest's closest domestic competitors in the Brazilian enterprise market.
• Mandiant (Google Cloud): Now part of Google Cloud, Mandiant delivers incident response, managed detection, threat intelligence, and security consulting — directly overlapping Tempest's portfolio. Particularly comparable as Tempest's SOC runs on Google SecOps, making Mandiant both a peer and a partner's parent.
• Cipher (Prosegur Ciberseguridad): Latin American cybersecurity services firm (acquired by Prosegur), historically one of Brazil's leading pure-play cyber firms. Direct head-to-head competitor for Tempest in Brazilian and LATAM enterprise accounts across consulting and MSS.
• NCC Group: UK-headquartered global cybersecurity firm delivering consulting, managed detection, threat intelligence, and software resilience services. Comparable multi-pillar services model; particularly relevant to Tempest's London-based European ambitions.
• Arctic Wolf: Leading MDR provider delivering 24/7 SOC-as-a-service with a security operations platform. Competes with Tempest's MSS offering, particularly for mid-market and enterprise customers seeking outsourced security operations.
• eSentire: Pure-play MDR and SOC services provider serving mid-market and enterprise globally. Comparable services-led, integration-heavy model with continuous monitoring — overlapping Tempest's MSS pillar and threat intel feeds.

Broad incumbents

• CrowdStrike Services: Global endpoint security leader with an expanding services arm (incident response, SOC, advisory). Tempest is a CrowdStrike partner but CrowdStrike's services business increasingly overlaps Tempest's MDR/IR offering for global accounts.
• Deloitte Cyber Risk Services: Big 4 cybersecurity practice offering strategy, transformation, managed security, and incident response at global scale. Competes with Tempest for enterprise board-level security advisory and transformation engagements.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/tempest_sec
• Facebookfacebook.com/tempestsec
• LinkedInlinkedin.com/company/tempestsec

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Tempest