What Protega does

Protega is a Brazil-headquartered cybersecurity firm founded in 2002 that, in 2024, merged with sibling entity SafeWay under Grupo Stefanini to form Stefanini Cyber, the dedicated cybersecurity brand of the 37-year-old Brazilian technology conglomerate. The consolidated entity operates as a one-stop-shop enterprise cybersecurity provider, organized around eight service pillars: Application Security (DevSecOps, squads), Risk Assessment (vulnerability scanning, penetration testing, external attack surface management, third-party risk), System Architecture (XDR, automated malware detection, SSE, IAM/PAM/IGA), Security Operations (N1/N2 monitoring, threat hunting, DFIR, MSS/MDR, SIEM), Frameworks and Compliance (ISO 27001, NIST CSF/800-207/800-82r3, CIS, IEC 62443, GRC), Physical Security for OT/IoT, User Education, and the Stefanini Artificial Intelligence (SAI) platform. The proprietary SAI suite bundles SAI Safe 24x7, SAI MDR, and SAI Low Risk, with CROC (launched 2025-02) adding real-time cyber risk monitoring.

The underlying technology stack combines AI-assisted detection (anomaly detection, threat intelligence automation, generative AI positioning) with established partner products from Microsoft, IBM, Cisco, Fortinet, Forcepoint, Tenable, Trend Micro, Veracode, Nozomi Networks, and others. The company employs more than 1,000 dedicated cybersecurity specialists worldwide and operates from a São Paulo base with stated global reach, multilingual web presence (Portuguese, Spanish, English), and brand presence at Black Hat USA 2024.

The business model is enterprise-led and contract-based, monetized through managed security services (MSS/MDR), professional services, and subscription-style recurring AI security offerings targeting large organizations across IT, OT, and IoT environments. GTM is direct enterprise field sales supported by content marketing, organic social (LinkedIn, Instagram), email newsletters, and industry-event presence. No public pricing tiers or customer logos are disclosed. The consolidated entity targets global revenue above R$ 200 million for the current fiscal year.

Name

Protega

Legal name

Stefanini Cyber

Website

https://protega.com.br

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

101–250 employees

Short description

Protega merged with SafeWay in 2024 to form Stefanini Cyber, the cybersecurity subsidiary of Brazil's Grupo Stefanini. It delivers enterprise cybersecurity services and AI-powered security products (SAI suite, CROC) across eight pillars — application security, risk assessment, system architecture, security operations, compliance, OT/IoT, training, and managed detection and response — to large global organizations.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (5415), Software Publishers (513210)

SIC

Services-Computer Integrated Systems Design (7373), Services-Prepackaged Software (7372)

akta.pro primary industry

Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies) (HDAEANAE)

akta.pro secondary industry

AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA)

Keywords

• Cybersecurity services
• Managed security operations
• Incident response services
• Vulnerability management
• Security compliance

Headquarters

HQ city

São Paulo

HQ country

Brazil

HQ region

Latin America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Cybersecurity Solutions and Services: Stefanini Cyber offers a comprehensive portfolio of cybersecurity solutions including Application Security, Risk Assessment, System Architecture, Security Operations, Physical Security OT & IoT, User Education, and Frameworks & Compliance. Revenue is generated through managed security services, professional services, and AI-powered security solutions targeting enterprise clients on a subscription and contract basis.
2. Stefanini Artificial Intelligence (SAI) Suite: AI-powered security products including SAI Safe 24x7, SAI MDR, and SAI Low Risk, offered as part of the integrated cybersecurity portfolio. These AI-driven offerings generate recurring revenue as premium security services.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Protega is a Brazilian cybersecurity firm that has merged into Stefanini Cyber, the unified cybersecurity brand of Grupo Stefanini. The company sells enterprise cybersecurity services across application security, risk assessment, system architecture, security operations, OT/IoT security, compliance, user education, and an AI-powered SAI platform offering SAI Safe 24x7, SAI MDR, and SAI Low Risk. It positions itself as a one-stop-shop combining AI, organizational resilience, and operational risk mitigation for large organizations.

Product overview

Stefanini Cyber (formerly Protega and Safeway) is a one-stop-shop cybersecurity company offering an integrated portfolio of security solutions. The portfolio is organized around eight core service pillars: Application Security (DevSecOps and squads), Risk Assessment (vulnerability scanning, penetration testing, attack surface management), System Architecture (XDR, malware detection, SSE, IAM, PAM, IGA), Security Operation (monitoring, DFIR, threat intelligence, MSS/MDR, SIEM), Frameworks and Compliance (ISO 27001, NIST, Zero Trust), Physical Security (OT/IoT), User Education (security awareness), and Stefanini Artificial Intelligence (SAI) platform. The SAI platform includes SAI Safe 24x7, SAI MDR, and SAI Low Risk modules. CROC is a real-time cyber risk monitoring solution. The company combines AI, organizational resilience, and operational risk mitigation to provide comprehensive cybersecurity services.

Differentiator

Problem solved

Functional benefit

Brands

• SAI – Stefanini Artificial Intelligence: AI-powered cybersecurity product line including SAI Safe 24x7, SAI MDR, and SAI Low Risk.

Products and services

• Application Security Application security solutions including DevSecOps implementation and dedicated security squads for continuous protection throughout the software development lifecycle, targeting enterprise clients.
• Risk Assessment Comprehensive risk assessment services including vulnerability scanning, penetration testing, external attack surface management, and third-party risk evaluation, targeted at enterprise clients.
• System Architecture Security infrastructure solutions including Extended Detection and Response (XDR), automated malware detection, Security Service Edge (SSE), Identity Access Management (IAM), Privileged Access Management (PAM), and Identity Governance Administration (IGA) for enterprise clients.
• Security Operation Managed security operations including N1/N2 monitoring, threat hunting, incident response, Digital Forensics (DFIR), vulnerability management, cyber threat intelligence, security staffing, MSS/MDR services, and SIEM solutions for enterprise clients.
• Frameworks and Compliance Regulatory compliance and governance solutions supporting ISO 27001, NIST CSF, NIST 800-862, NIST 800-207 (Zero Trust), IEC 62443, NIST 800-82r3, CIS controls, and Governance, Risk and Compliance (GRC) frameworks for enterprise clients.
• Physical Security – Cyber OT & IoT Operational technology (OT) and Internet of Things (IoT) cybersecurity solutions for industrial control systems and connected devices, targeted at enterprise clients with industrial environments.
• User Education Security awareness training programs including Security Awareness courses for employee education and risk reduction, delivered to enterprise clients.
• Stefanini Artificial Intelligence (SAI) AI-powered cybersecurity platform encompassing SAI Safe 24x7 (continuous monitoring), SAI MDR (Managed Detection and Response), and SAI Low Risk (risk reduction solutions), sold to enterprise clients as part of the unified Stefanini Cyber portfolio.
• CROC (Cyber Risk On Control) Real-time cyber risk monitoring solution that continuously tracks and monitors cyber risks, providing organizations with immediate threat visibility, sold as part of the Stefanini Cyber portfolio.

Quantifiable outcome

• Doubled in size following the merger of SafeWay and Protega, targeting R$ 200 million+ in global revenue.

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability4 records

Feature9 records

Partnerships

Ten partnerships are on record, tiered core.

• ForcepointcoreTechnology or IntegrationForcepoint is listed as a major technology partner providing data loss prevention and web security solutions.
• FortinetcoreTechnology or IntegrationFortinet is listed as a major technology partner providing network security and firewall solutions.
• IBMcoreTechnology or IntegrationIBM is listed as a major technology partner providing security technology including IBM Security QRadar, referenced in multiple articles on the website.
• MicrosoftcoreTechnology or IntegrationMicrosoft is listed as a major technology partner providing cloud and enterprise security solutions.
• Nozomi NetworkscoreTechnology or IntegrationNozomi Networks is listed as a technology partner specializing in operational technology (OT) and IoT security, aligned with Stefanini Cyber's Physical Security Cyber OT & IoT offering.
• SAI SuitecoreTechnology or IntegrationSAI Suite is listed as a technology partner and appears to be a proprietary AI security solution integrated into the Stefanini Cyber portfolio.
• TenablecoreTechnology or IntegrationTenable is listed as a major technology partner providing vulnerability management and exposure management solutions.
• Trend MicrocoreTechnology or IntegrationTrend Micro is listed as a major technology partner providing endpoint and network security solutions.
• VeracodecoreTechnology or IntegrationVeracode is listed as a major technology partner providing application security testing solutions.
• CiscocoreTechnology or IntegrationCisco is listed as a major technology partner providing network and cybersecurity solutions.

Scale indicators4 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike: Global cybersecurity leader offering the Falcon platform with native AI-driven EDR, XDR, MDR, threat intelligence, and identity protection — directly overlapping with Stefanini Cyber's SAI MDR, XDR, and threat intelligence offerings, but at vastly greater scale and R&D investment.
• Palo Alto Networks: Large cybersecurity platform vendor with Cortex XSIAM, Prisma, and Unit 42 managed services that compete with Stefanini Cyber's SecOps, XDR, and managed detection offerings, as well as broader compliance/GRC capabilities.
• Mandiant (Google Cloud): Premier cybersecurity services firm specializing in incident response, threat intelligence, and managed defense — directly overlapping Stefanini Cyber's DFIR, threat intelligence, and MDR capabilities, with a strong global brand.
• Fortinet: Large network and security platform vendor whose products (FortiGate, FortiSIEM, FortiEDR) underpin much of Stefanini Cyber's SOC and XDR stack — both a critical partner and a competitor as Fortinet expands its own MSS offerings.
• Trend Micro: Global cybersecurity vendor offering Vision One platform, MDR services, and attack surface management — overlapping Stefanini Cyber's XDR, MDR, and EASM offerings while also being a listed technology partner.

Direct peers

• Secureworks: Pure-play MSSP and XDR provider offering managed detection, incident response, and compliance services to mid-market and enterprise customers — a closely analogous business model to Stefanini Cyber's managed security operations and DFIR services.
• Trustwave: Global MSSP delivering managed detection and response, DFIR, threat intelligence, and security consulting — competing head-to-head with Stefanini Cyber for enterprise MSS and compliance engagements.
• NCC Group: UK-listed cybersecurity services firm providing managed detection, threat intelligence, escrowed compliance, and incident response — closely comparable to Stefanini Cyber in service breadth and target enterprise customer profile.

Regional players

• Telefónica Tech / ElevenPaths: Spanish-headquartered MSSP and cybersecurity services arm of Telefónica, with deep presence across Spain and Latin America — a direct regional competitor for enterprise managed security deals in markets where Stefanini Cyber also competes.
• Tempest Security Intelligence: Brazilian MSSP and offensive-security specialist offering managed detection, incident response, and security consulting — a direct LatAm competitor to Stefanini Cyber for Brazilian enterprise and government clients.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Instagraminstagram.com/stefaninicyber
• Xx.com/protegasec
• Facebookfacebook.com/protega
• LinkedInlinkedin.com/company/protegamanagedcybersecurity

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Protega