What Layer8 does

Layer8 is a Portuguese information security and compliance management company founded in November 2011 and headquartered in Lisbon, with a secondary office in Porto. The firm operates a sales-led, consultative go-to-market targeting enterprise organizations as its primary customer segment and small-to-medium businesses as a secondary segment, with services delivered across the Iberian market. Layer8 is exclusively focused on information security, privacy, and compliance, organized around three service lines — consulting (IS governance, PCI-DSS, ISO/IEC 27001, GDPR compliance, CSIRT/SOC support, ethical hacking), technology services (network, endpoint, application, content, wireless, and cloud security solution design and implementation), and managed services (reactive and proactive support with up to 24x7x4 SLAs delivered through a customer portal). Revenue is generated through professional services engagements, managed service contracts, and technology solution implementations on multi-year terms, with quote-based, non-publicly-disclosed pricing and a free IT health check used as initial-engagement mechanism.

Layer8 complements its services portfolio with four proprietary, internally developed security products: DNS8 (DNS-layer malware and malicious-website prevention using DNS Response Policy Zones), LEARNING8 (a security awareness training platform with multimedia content localized in Portuguese, Spanish, and English), VULN8 (a distributed vulnerability scanner operated by an ethical hacking team using virtual and physical sensors), and FISH8 (a phishing and social-engineering simulation platform covering email, malicious media, rogue AP, and physical perimeter testing). The products are produced by an internal R&D team that was formally established in 2015 and supported by a network of academic and institutional partnerships with ISCTE-IUL, LISS, European University, and FCT.

The firm maintains a dense stack of third-party trust marks — CREST member-company accreditation, Trusted Introducer / TF-CSIRT membership, Rede CSIRT, CSIRTs Network, and ISO/IEC 27001 certification — which anchor its positioning for regulated and public-sector engagements. Layer8 sits within a broader technology vendor ecosystem including Palo Alto Networks, Splunk, Microsoft, Check Point, Fortinet, CyberArk, CrowdStrike, Tenable, Rapid7, Proofpoint, and Elastic, with staff certified across these platforms. Headcount is reported at 51–100 employees, no parent company, external investor, or M&A activity is disclosed, and no revenue figures or funding rounds appear in available data; the company presents as an independently owned, founder/management-led Iberian security services provider.

Name

Layer8

Legal name

LAYER8

Website

https://layer8.pt

Company type

Private

Founded year

2011

Operating status

Operating

Headcount range

51–100 employees

Short description

Layer8 is a Portuguese information security firm providing consulting, managed, and technology security services alongside four proprietary products (DNS8, LEARNING8, VULN8, FISH8), serving enterprise organizations primarily and SMBs secondarily across the Iberian market.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industries

DNS Security & Protective DNS (HDADABAF), Configuration & Exposure Hardening (CIS/Benchmarking) (HDADAHAH)

Keywords

• Information security services
• Cybersecurity consulting
• Vulnerability management
• Security awareness training
• Managed security services

Headquarters

HQ city

Lisbon

HQ country

Portugal

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Consulting Services: Advisory services dedicated to IS Governance Management, from Policy to Procedures development, Maturity Assessments, as-a-service support for upper management roles, and information security strategic planning/roadmap development. Includes privacy and compliance management (PCI-DSS, ISO/IEC 27001, GDPR), CSIRT services, and ethical hacking technical auditing.
2. Managed Services: Reactive and proactive support services ensuring IT teams have access to technical assistance up to 24x7x4 SLA. Includes preventative maintenance, infrastructure monitoring, and customer portal for support management.
3. Technology Services: Technical solutions, provisions and policies for network security, endpoint security, application security, content security, wireless security, and cloud security. Revenue from solution implementation, configuration, and ongoing support.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

Layer8 provides information security, privacy, and compliance management solutions through three service lines (Consulting, Technology, and Managed Services) and four proprietary products: DNS8 for DNS-layer malware prevention, LEARNING8 for security awareness training, VULN8 for distributed vulnerability scanning, and FISH8 for phishing and social engineering simulation. The company serves enterprise and SMB clients in Portugal primarily, offering advisory services, technical security implementation, and reactive/proactive support up to 24x7x4 SLA.

Product overview

Layer8 is a Portuguese information security company incorporated in November 2011, offering a portfolio of four proprietary security products (DNS8, LEARNING8, VULN8, FISH8) complemented by three service lines (Consulting Services, Technology Services, Managed Services). DNS8 provides DNS-layer malware prevention; LEARNING8 delivers security awareness training; VULN8 offers distributed vulnerability scanning; and FISH8 enables phishing/social engineering simulations. These products are supported by consulting (governance, compliance, ethical hacking), technology (network, endpoint, application, cloud security), and managed services (reactive/proactive support). The company was founded in 2011 and emphasizes specialized human capital and innovation as differentiators.

Differentiator

Problem solved

Functional benefit

Brands

• DNS8: DNS-based service for malware and malicious websites access prevention using DNS Response Policy Zones (RPZ)
• LEARNING8
• VULN8
• FISH8

Products and services

• DNS8 DNS-based service using Response Policy Zones (RPZ) to prevent access to malware, malicious websites, viruses, Trojans, and ransomware in enterprise networks.
• LEARNING8 Security user awareness platform with multimedia content for delivering and managing corporate security awareness programs, available in Portuguese, Spanish, and English.
• VULN8 Distributed vulnerability scanner operated by ethical hacking team, supporting virtual and physical sensors with custom modules and time schedules for vulnerability assessment and mitigation.
• FISH8 Phishing simulation and social engineering attack platform covering email phishing, malicious media (USB, CD-ROM), rogue AP, and physical perimeter assessment.
• Consulting Services Advisory services covering IS Governance Management, Privacy/Risk/Compliance Management (PCI-DSS, ISO/IEC 27001, GDPR), CSIRT/SOC support, and Ethical Hacking technical auditing.
• Technology Services Technical solutions for Network Security, Endpoint Security, Application Security, Content Security, Wireless Security, and Cloud Security implementation, configuration, and ongoing support.
• Managed Services Reactive and proactive support services including 24x7x4 SLA support, preventative maintenance, infrastructure monitoring, and customer portal for support request management.

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

16 partnerships are on record, tiered core and minor.

• Palo Alto NetworkscoreTechnology or IntegrationCore technology partner for next-generation firewall and threat prevention solutions. Staff certified as Palo Alto Networks Certified Network Security Engineer (PCNSE), Accredited Systems Engineer (PSE), and Accredited Configuration Engineer (ACE).
• SplunkcoreTechnology or IntegrationCore technology partner for SIEM and log management. Staff certified as Splunk Core Certified Power User and Splunk Core Certified User.
• Check PointcoreTechnology or IntegrationCore technology partner for network security. Staff certified as Check Point Certified Security Master (CCSM), Certified Security Expert (CCSE), Certified Security Administrator (CCSA), and SandBlast Network Administrator.
• CyberArkcoreTechnology or IntegrationCore technology partner for privileged access management. Staff certified as CyberArk Professional Partner, Certified Trustee, and Certified Defender.
• FortinetcoreTechnology or IntegrationCore technology partner for network security. Staff certified at multiple Fortinet NSE levels (NSE 4-7).
• MicrosoftcoreTechnology or IntegrationCore technology partner for cloud security, identity management, and enterprise security solutions.
• European UniversityminorStrategic or Co-development PartnerAcademic partner for knowledge creation and sharing. Layer8 conducts lectures in specific information security areas and welcomes graduate students.
• ISCTE-IULminorStrategic or Co-development PartnerAcademic partner - Instituto Universitário de Lisboa. Deep connections for building knowledge and professionalism of Layer8 resources.
• LISSminorStrategic or Co-development PartnerAcademic partner for knowledge sharing and student integration within Layer8 services.
• FCT - Fundação para a Ciência e a TecnologiaminorStrategic or Co-development PartnerInstitutional partner - Portuguese Foundation for Science and Technology, supporting academic investigation proposals.
• ISACAminorStrategic or Co-development PartnerInstitutional partner following ISACA methodologies and best practices including CISA, CISM, CRISC, COBIT.
• BSIminorStrategic or Co-development PartnerInstitutional partner - British Standards Institution, for standards and compliance methodologies.
• NISTminorStrategic or Co-development PartnerInstitutional partner following NIST cybersecurity framework and standards.
• OWASPminorStrategic or Co-development PartnerInstitutional partner following OWASP standards for web application security testing.
• PCI Security Standards CouncilminorStrategic or Co-development PartnerInstitutional partner for PCI-DSS compliance standards and methodologies.
• ISOminorStrategic or Co-development PartnerInstitutional partner following ISO/IEC standards including 27001 Lead Implementer and Lead Auditor certifications.

Scale indicators2 records

Recent moves8 records

Expansion highlights4 records

Broad incumbents

• NCC Group: UK-headquartered cybersecurity and resilience consultancy with global managed services, ethical hacking, and compliance offerings — larger competitor in the European mid-market and enterprise space.
• Trustwave: Global cybersecurity MSSP offering managed detection, vulnerability management, and consulting — competes for the same types of mid-market and enterprise managed security engagements as Layer8.
• Telefónica Tech (Cybersecurity): Iberian telecommunications incumbent's cybersecurity division offering managed security, SOC, and consulting services; competes for large Iberian enterprise contracts with scale advantages Layer8 lacks.
• Atos Cybersecurity: Global IT services firm with significant Iberian presence offering managed security services, SOC, and compliance consulting — competes for large Iberian enterprise contracts alongside Layer8.
• Optiv: Large North American cybersecurity solutions integrator and MSSP with deep vendor partnerships (Palo Alto, Splunk, Check Point, Fortinet, Microsoft) — directly comparable vendor-aligned services model to Layer8.
• Deloitte Cyber: Global Big Four consulting practice with large Iberian cybersecurity team covering managed services, GRC, ethical hacking, and incident response — competes for enterprise cybersecurity and compliance mandates.

Direct peers

• S21sec: Iberian-focused cybersecurity MSSP and consultancy with deep presence in Spain and Portugal, offering managed detection, ethical hacking, threat intelligence, and compliance services — directly comparable business model and customer set.
• Cipher (Prosegur): Prosegur-owned managed cybersecurity services provider operating across Iberia and LATAM with managed services, consulting, and managed SOC capabilities — competes for the same Iberian enterprise and regulated-industry accounts as Layer8.
• Kudelski Security: Boutique managed security services provider with comparable size and consulting-plus-managed model across Europe and the US; serves as a useful international comparator for Layer8's services-led strategy.
• Integrity (Portugal): Portuguese cybersecurity and risk management consultancy offering ethical hacking, compliance, and managed security services — competes head-to-head with Layer8 for Portuguese enterprise clients.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/layer8.pt
• LinkedInlinkedin.com/company/layer8

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Layer8