What IT2S Group does

IT2S Group (legal name: IT2S Consultoria em Segurança e Sistemas de Informações Ltda) is a privately held Brazilian information security and privacy consultancy founded in 2008 and headquartered in Porto Alegre, Rio Grande do Sul, with a secondary office in Los Angeles, United States. The firm delivers outsourced cybersecurity, compliance, and data protection services via a remote, 24/7 multidisciplinary team, targeting organizations — primarily Brazilian startups and SMBs — that lack dedicated internal security functions.

The core product portfolio is anchored on Virtual CISO (vCISO) for continuous cyber risk management and DPOaaS (Data Protection Officer as a Service) for LGPD, GDPR, and CCPA compliance monitoring. Supporting services include Privacy360 (a privacy governance module built on ISO2700X, ISO29100, and ISO27701), SecOps for secure environment configuration, AppSec for secure development lifecycle, and Red Team / Blue Team offensive and defensive security testing. The Security Squad 9-area governance framework (Strategy, Legal & Compliance, SecOps, Privacy & Security, Organizational Security, Network & Systems Security, Third-Party Security, AppSec, Continuity Management) standardizes engagement delivery across these services.

The business model is custom-priced, subscription-based managed services billed monthly, with no public rate cards. IT2S Group markets a 30-50% cost saving versus hiring a full-time security manager and up to 8x lower cost than building an internal security team, removing employment overhead such as overtime and vacation. The go-to-market is sales-led and fully remote, with direct outreach via website forms, phone, and email; marketing is concentrated in organic social (LinkedIn, Instagram, Facebook, Twitter), a blog, and an email newsletter. The disclosed customer base comprises approximately 15 logos spanning SaaS, fintech, healthcare, legal, and logistics, predominantly Brazilian startups, with one US office suggesting nascent international expansion. No funding rounds, acquisitions, or institutional investors are disclosed.

Name

IT2S Group

Legal name

IT2S Consultoria em Segurança e Sistemas de Informações Ltda

Website

https://it2sgroup.com

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

1–10 employees

Short description

IT2S Group is a Brazilian cybersecurity and privacy consultancy delivering outsourced Virtual CISO, DPOaaS, and Privacy360 governance services to startups and SMBs lacking internal security teams, operating remotely across Brazil and the US.

Ownership category

akta.pro rank

Product category

Cybersecurity and Privacy Consulting Services

NAICS

Computer Facilities Management Services (541513), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

ITSM Governance, Compliance & Audit Readiness (BPAEAJAM)

Keywords

• Managed security services
• Virtual CISO services
• Data privacy compliance
• Penetration testing services
• Application security testing

Headquarters

HQ city

Porto Alegre

HQ country

Brazil

HQ region

Latin America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Managed Security Services: Ongoing security and privacy services delivered continuously by multidisciplinary teams. Services include vCISO, DPOaaS, SecOps, AppSec, Red Team, and Blue Team. Pricing is negotiated flexibly without concerns about overtime, vacation, or other employment charges associated with full-time hires. Cost savings of 30-50% compared to full-time security managers, and up to 8x lower overall than internal team formation.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels7 records

Core offering

IT2S Group provides outsourced information security and privacy services to startups and small-to-medium businesses, led by a multidisciplinary team delivering Virtual CISO (vCISO) and Data Protection Officer-as-a-Service (DPOaaS) engagements. The firm covers security governance, LGPD/GDPR compliance, privacy program management, security operations, application security, and offensive/defensive security testing, all delivered remotely.

Product overview

IT2S Group is a specialized information security, compliance, and privacy consultancy that offers a suite of services as an alternative to hiring full-time security professionals. The core offering combines Virtual CISO (vCISO) and DPOaaS services delivered by a multidisciplinary team operating 24/7 remotely. The product portfolio centers on vCISO for continuous data protection and cyber risk management, paired with DPOaaS for privacy compliance monitoring. Privacy360 extends the offering as a module focused on privacy governance programs based on ISO standards. Supporting services include SecOps for secure configuration, AppSec for secure development lifecycle, and Red Team/Blue Team offensive/defensive security testing services. The company claims costs up to 8x lower than internal hiring, with 30-50% savings compared to full-time security managers.

Differentiator

Problem solved

Functional benefit

Brands

• Privacy360: A governance program module within VO Management that delivers and manages a complete Privacy Governance program in organizations on a continuous basis, addressing legal and technical aspects of data protection and privacy.
• Virtual Officer (VO)
• Virtual CISO (vCISO)
• DPOaaS
• SecOps
• AppSec
• Red Team
• Blue Team

Products and services

• Virtual CISO (vCISO) Outsourced Chief Information Security Officer service providing startups and SMBs with senior security leadership, governance, risk management, and security strategy on a recurring remote basis.
• DPO-as-a-Service (DPOaaS)
• Privacy360
• SecOps
• AppSec
• Red Team
• Blue Team

Quantifiable outcome

• Cost reduction of 30-50% compared to hiring a full-time security manager
• +1 more outcomes

Named customers15 records

Segments3 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Scale indicators3 records

Recent moves4 records

Expansion highlights4 records

Direct peers

• Arctic Wolf: US-based MDR/MSSP delivering outsourced security operations to SMBs and mid-market, the same customer profile and outsourced-coverage value proposition that IT2S targets.
• eSentire: Managed detection and response provider serving SMB/mid-market organizations with 24/7 outsourced security coverage — directly comparable delivery model and customer segment to IT2S.
• Trustwave: Global MSSP offering managed security, compliance, and testing services to enterprises and SMBs — overlapping in vCISO-style advisory, MDR, and compliance work that IT2S delivers.
• Kudelski Security: Managed security services and cyber advisory firm providing vCISO, MDR, and offensive testing — a comparable outsourced security stack targeting mid-market clients.
• Kroll (Cyber Risk): Cyber risk advisory including incident response, managed security, and governance consulting — overlapping with IT2S's Red/Blue Team, governance, and compliance practices.
• Tesserent: Australia-headquartered MSSP providing managed security, consulting, and advisory to SMB/mid-market — a comparable outsourced-security business model.
• Herjavec Group: MSSP and advisory firm specializing in outsourced security services, identity, and MDR for SMB/mid-market — direct comparison for IT2S's managed security positioning.

Regional players

• Tempest Security Intelligence: Brazilian cybersecurity consultancy offering offensive testing, managed security, and compliance services — a same-geography competitor with overlapping vCISO/pen-test offerings.

Broad incumbents

• Deloitte (Cyber & Strategic Risk): Big 4 advisory with large-scale cybersecurity, privacy, and vCISO practices — competes for the same buyer need but from a global, multi-disciplinary platform.
• PwC (Cybersecurity & Privacy): Global advisory with a sizable cyber and privacy practice serving enterprise and mid-market buyers — overlaps with IT2S's compliance, DPO, and governance work.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/it2sgroup
• Facebookfacebook.com/it2sgroup
• LinkedInlinkedin.com/company/it2sgroup
• Instagraminstagram.com/it2sgroup

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IT2S Group