What Site Blindado does

Site Blindado is a Brazilian cybersecurity company founded in 2005 and headquartered in São Paulo, with a secondary office in Curitiba. The company specializes in website and e-commerce protection, serving primarily Brazilian online retailers, digital businesses, and organizations that need to meet PCI-DSS requirements. Its portfolio is organized around five interconnected offerings: Blindagem de Sites (a tiered site-armor subscription), Certificados SSL (DV, OV, EV, Wildcard, SAN/MDC, and Code Signing), WAF, Pentest, and PCI Compliance support, with PCI and advanced WAF add-ons routed through the Conviso platform.

The technical stack combines a Web Application Firewall and CDN powered by Azion's edge network, automated vulnerability and attack-surface scanning, SSL/TLS certificate management, and manual penetration testing delivered by a Red Team holding CISSP, CEH, and OSCP certifications. The WAF provides real-time blocking of DDoS, SQL Injection, XSS, brute force, and malicious bot attacks, with rules that adapt to observed traffic patterns. The Resilience tier layers AI-agent-assisted pentest on top of human-led testing, although the underlying model or vendor is not disclosed.

Site Blindado's business model is hybrid. A self-serve subscription product targets SMBs at publicly disclosed monthly prices (Reputation R$399, Protection R$699, Resilience R$799), while enterprise and PCI compliance deals are quote-based and handled by a direct commercial team. Revenue streams therefore include recurring subscriptions, professional services for pentest engagements, and managed services for PCI consulting. Distribution runs through the company website for SMB tiers, through the in-house sales team for enterprise, and since 2025 through the Conviso channel for PCI and advanced WAF offerings, with content marketing and Portuguese-language SEO supporting top-of-funnel demand generation.

Name

Site Blindado

Legal name

Site Blindado

Website

https://siteblindado.com

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

101–250 employees

Short description

Site Blindado is a Brazilian cybersecurity company providing website protection, SSL certificates, WAF, penetration testing, and PCI compliance services to e-commerce businesses and digital platforms. Since 2025 it operates as a subsidiary of Conviso.

Ownership category

akta.pro rank

Product category

Website Security / Application Security

NAICS

Software Publishers (5132)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Marketplace & Platform Trust & Safety (Buyer/Seller Abuse) (HDADALAI)

Keywords

• Website security
• Web application firewall
• Vulnerability scanning
• SSL certificates
• Penetration testing

Headquarters

HQ city

São Paulo

HQ country

Brazil

HQ region

Latin America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Subscription Security Services: Monthly and annual subscription plans for website security services including Blindagem (site protection), SSL certificates, WAF, and monitoring. Recurring revenue model with tiered pricing based on protection level.
2. Penetration Testing Services: Professional penetration testing services for web applications, mobile apps, APIs, networks, cloud, IoT/hardware, and AI systems. Delivered by certified Red Team specialists with detailed reports and remediation support.
3. PCI Compliance Services: PCI-DSS compliance consulting including ASV scans, SAQ support, and certification assistance. Offered as a premium tier (PCI Compliance plan) or standalone Conviso consulting services.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels2 records

Core offering

Site Blindado sells cybersecurity software and services that protect websites and e-commerce platforms from cyber attacks. Its core offering combines automated vulnerability scanning, SSL/TLS certificate issuance, a Web Application Firewall with CDN delivered at edge, and professional penetration testing, packaged under a tiered subscription product (Blindagem de Sites) alongside standalone SSL and Pentest products. It also offers PCI-DSS compliance support for card-handling merchants, primarily within the Brazilian market.

Product overview

Site Blindado is a unified cybersecurity platform for websites and e-commerces, offering five interconnected security products: Blindagem de Sites (tiered site armor with vulnerability scanning, SSL, WAF/CDN, and PCI compliance), Certificados SSL (domain, organization, and extended validation certificates), Pentest (manual and automated penetration testing across web, mobile, network, cloud, IoT, and AI environments), WAF (Web Application Firewall with CDN acceleration via Azion), and PCI Compliance support. The portfolio is designed to address the full spectrum of website security needs from basic protection to advanced penetration testing and regulatory compliance.

Differentiator

Problem solved

Functional benefit

Products and services

• Blindagem de Sites Tiered subscription product for website and e-commerce protection that combines automated vulnerability scanning, the Site Blindado trust seal, SSL certificates, and WAF + CDN at edge. Offered in four tiers (Reputation, Protection, Resilience, PCI Compliance) at increasing price points, targeting online retailers that need consumer-visible security and conversion uplift.
• Certificados SSL Portfolio of SSL/TLS certificates covering DV (Domain Validation), OV (Organization Validation), EV (Extended Validation), Wildcard DV, SAN/MDC (Multi-Domain), and Code Signing certificates. Used to encrypt data in transit, authenticate websites, and improve Google ranking; supported in Portuguese with free reissuance.
• Pentest Penetration testing service delivered by certified Red Team specialists across web applications, mobile apps, APIs, networks and cloud infrastructure, IoT/hardware, and AI systems. Includes White Box, Black Box, and Gray Box methodologies, detailed reporting, and remediation support. AI-assisted pentest is offered as part of the Resilience tier.
• WAF (Web Application Firewall) Web Application Firewall that blocks DDoS, SQL Injection, Cross-Site Scripting, brute force, and malicious bots in real time, combined with a CDN for content delivery acceleration. Delivered via edge locations powered by Azion technology and integrated with Site Blindado's subscription plans.
• PCI Compliance PCI-DSS compliance support service providing ASV PCI scans, SAQ questionnaire filling assistance, and certification guidance for e-commerces and merchants handling card payments. Sold both as the top Blindagem de Sites tier ("Sob Consulta") and as a standalone consulting service through Conviso.

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature5 records

Partnerships

Two partnerships are on record, tiered core.

• ConvisocoreStrategic or Co-development PartnerSite Blindado is part of the Conviso ecosystem. Conviso is an application security specialist recognized in Brazil and internationally for its focus on protecting the entire software development lifecycle. This partnership strengthens Site Blindado's purpose and expands its capacity to offer robust, updated solutions aligned with security best practices.
• AzioncoreTechnology or IntegrationAzion provides the edge network technology powering Site Blindado's WAF and CDN solutions. Azion's global edge network enables real-time security protection, low-latency content delivery, and intelligent security rules that learn from traffic patterns.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Cloudflare: Global leader in CDN, WAF, DDoS protection, and bot management. Cloudflare directly competes with Site Blindado in the WAF and CDN layer and serves many of the same types of digital businesses, albeit at a much larger global scale.
• Sucuri: Website security platform offering WAF, malware removal, and vulnerability scanning for SMBs and agencies. Highly comparable in target customer (small/medium website owners) and core product (website armor), serving as a US/global analog to Site Blindado.
• Qualys: Cloud-based vulnerability management and web application scanning provider. Closely comparable to Site Blindado's vulnerability scanning and continuous monitoring components, with a broader enterprise security platform.
• Sectigo: Major SSL/TLS certificate authority also offering web security and PCI compliance services. Directly comparable in the SSL certificate product line that is a core part of Site Blindado's portfolio.
• GoDaddy Security (SiteLock): Website security service (originally SiteLock) bundled with hosting providers, offering WAF, malware scanning, and SSL. Closely comparable SMB-focused website security model to Site Blindado's tiered subscription plans.

Broad incumbents

• Akamai: Major global CDN and security provider with App & API Protector (WAF), bot management, and DDoS protection. Overlaps directly with Site Blindado's WAF/CDN offering but operates as a much broader enterprise-focused incumbent.
• F5 (NGINX App Protect): Application delivery and security vendor offering WAF, bot defense, and API security. Comparable in WAF and application protection capabilities, typically serving larger enterprises but increasingly targeting mid-market digital businesses.
• Conviso Application Security: Parent company and Brazilian application security specialist. Directly comparable as a security services provider with overlapping pentest, WAF (DevArmor), and PCI compliance capabilities, but positioned more broadly across the SDLC.

Regional players

• Vortico: Brazilian cybersecurity services provider focused on penetration testing and application security. Comparable as a Brazilian security services peer in the pentest space, though smaller and more service-oriented than Site Blindado's productized offering.

Others

• Azion: Edge computing platform that powers Site Blindado's WAF and CDN. Directly comparable in CDN/edge capabilities and a key technology enabler — could also be a competitor if Azion expands further into security services.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/siteblindado
• LinkedInlinkedin.com/company/site-blindado-sa

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Site Blindado