Scunna

What Scunna does

Scunna is a Brazilian cybersecurity services company and technology integrator founded in 1988 and headquartered in Porto Alegre with a regional office in São Paulo. The company operates an eight-domain technology portfolio — XDR, AIOps, Cloud Security, Network Security, Data Protection, PAM, CTEM, and OT Security — integrated through its Cyber Defense Center (CDC), a next-generation Fusion Center SOC that converges cybersecurity, fraud prevention, and business risk management into a unified 24x7 operational model. The CDC includes a dedicated Anti-Fraud module targeting financial sector and B2C clients, with documented native integrations to ERP, CRM, payment gateways, and IAM/SSO systems via REST APIs and webhooks for real-time transaction monitoring and behavioral data ingestion.

The business operates across three revenue streams: Managed Security Services (24x7 SOC operations delivered through the CDC on an annual subscription basis), Professional Services (solution deployment, technology environment assessment, sustainment, and custom projects delivered by Scunna's own team), and Consulting Services (cybersecurity assessments, LGPD privacy and data protection management, penetration testing, business continuity planning, and CTEM advisory). Go-to-market is sales-led with a consultative approach targeting mid-market and large enterprises in Brazil (company-size segmentation from 251 to 10,001+ employees), complemented by a channel-partner ecosystem of 14+ Core-tier technology vendors including Trellix, BeyondTrust, Dynatrace, Tenable, Proofpoint, Microsoft, SailPoint, Snyk, Trend Micro, Forescout, and Skyhigh. Pricing is custom quote-based for enterprise clients, with annual billing cadence for managed services.

The company holds ISO/IEC 27001 and ISO/IEC 27701 certifications covering all operational areas, establishing audited ISMS and privacy governance aligned with Brazil's LGPD and global frameworks. ISG Provider Lens recognized Scunna in Brazil in both 2024 (Managed Security Services SOC Midmarket) and 2025 (expanded to Next-Gen SOC/MDR, Technical Security Services, and Risk-based Vulnerability Management). Leadership consists of CEO Gustavo Gonçalves and CTO Ricardo Dastis. Ownership is private with no disclosed external investors, parent company, or M&A activity, and the company operates with 11–50 employees from its Porto Alegre headquarters and São Paulo regional office.

Name

Scunna

Legal name

SCUNNA

Website

https://scunna.com

Company type

Private

Founded year

1988

Operating status

Operating

Headcount range

51–100 employees

Short description

Scunna is a Brazilian cybersecurity services company and technology integrator founded in 1988, operating a Cyber Defense Center (Fusion Center SOC) and an eight-domain technology portfolio for mid-market and large enterprises across financial and B2C sectors in Brazil.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Security Systems Services (56162)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro industry

PRIMARYHDADAJAA

Industrial Control System (ICS) & SCADA Security

Hardware, Technology & Telecom/Cybersecurity/OT/ICS & Critical Infrastructure Security

SECONDARYBPAKAGAB

Access Control & Identity Systems Integration (Badge, Biometrics, Mobile)

Business & Public Services/Security & Investigations Services/Electronic Security Systems Integration (CCTV, Access Control)

SECONDARYEUADANAB

SCADA/ICS Security (DCS/PLC/RTU) & Secure Remote Access

Energy, Utilities & Environment/Electric Transmission & Distribution (T&D)/Grid Cybersecurity & Critical Infrastructure Protection

Keywords

• Managed security services
• Cybersecurity consulting
• SOC monitoring
• Threat detection response
• Cyber defense center

Headquarters

HQ city

Porto Alegre

HQ country

Brazil

HQ region

Latin America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure, Others

Revenue model

1. Managed Security Services (SOC/Cyber Defense Center): 24x7 monitoring, detection, and incident response services delivered through the Cyber Defense Center (CDC), operating as a next-generation SOC with Fusion Center capabilities. Includes continuous threat exposure management and automated response orchestration.
2. Professional Services: Implementation services, technology environment assessment, ongoing technology sustainment, and custom projects. Services include solution deployment aligned with organizational defense strategies, health check assessments, and continuous maintenance.
3. Consulting Services: Advisory services including cybersecurity assessment, privacy and data protection management (LGPD compliance), penetration testing, business continuity planning, and continuous threat exposure management.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Scunna delivers managed cybersecurity and digital performance services to Brazilian organizations through its Cyber Defense Center (CDC), a Fusion Center SOC that integrates extended detection and response, AIOps, cloud, network, data protection, privileged access, exposure management, OT security, and anti-fraud capabilities into a single operational model. The portfolio is rounded out by dedicated Professional Services and Consulting Services practices that support implementation, integration, architecture, and ongoing advisory engagements, all backed by ISO 27001 and ISO 27701 certified information security and privacy management.

Product overview

Scunna is a Brazilian cybersecurity services company and technology integrator founded in 1988, operating a portfolio of eight core technology domains (XDR, AIOps, Cloud Security, Network Security, Data Protection, PAM, CTEM, OT Security) complemented by a managed services hub — the Cyber Defense Center (CDC) / Fusion Center — which converges cyber, fraud, and risk operations. The CDC includes a dedicated Anti-Fraud module for financial fraud prevention. Around these, Scunna offers two service layers: Professional Services (solution deployment, health checks, sustainment, custom projects) and Consulting Services (security assessments, privacy/LGPD management, penetration testing, business continuity planning). All services are delivered by Scunna's own technical team, and the company holds ISO 27001 and ISO 27701 certifications across all operational areas.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber Defense Center (CDC) Fusion Center SOC operated by Scunna that integrates telemetry across multiple security domains to provide centralized monitoring, detection, and response for Brazilian clients.
• CDC Anti-Fraud Anti-fraud module delivered through the CDC platform, focused on detecting and responding to fraudulent activity for client organizations.
• Managed Extended Detection and Response (XDR) Managed XDR service combining endpoint, network, identity, and cloud telemetry with analytics-driven detection, investigation, and response.
• Managed AIOps for Security AIOps capabilities applied to security operations to automate correlation, reduce alert fatigue, and accelerate triage within Scunna's CDC.
• Continuous Threat Exposure Management (CTEM) Continuous exposure management service that identifies, prioritizes, and validates vulnerabilities and misconfigurations across the client's environment.
• External Attack Surface Management (EASM) Continuous discovery and monitoring of externally exposed assets, helping clients understand and reduce their external attack surface.
• Managed Cloud Security Managed security services for cloud workloads and SaaS environments, including posture management, workload protection, and cloud-native detection.
• Managed Network Security Managed network security service covering firewall, segmentation, intrusion detection/prevention, and traffic analysis delivered through Scunna's CDC.
• Data Protection Services Managed data protection service spanning data classification, encryption, data loss prevention, and backup/recovery aligned with privacy requirements.
• Privileged Access Management (PAM) PAM service covering privileged account governance, vaulting, session monitoring, and just-in-time access for administrative identities.
• Operational Technology (OT) Security OT security service for industrial and critical infrastructure environments, including asset discovery, segmentation, and continuous monitoring.
• Professional Services Implementation, integration, and migration services delivered by Scunna's professional services team to support client cybersecurity initiatives.
• Consulting Services Strategic cybersecurity consulting covering risk assessment, compliance, architecture, and program roadmap design for Brazilian clients.

Quantifiable outcome

• 5,056 serious incidents handled in 2025 with acceleration to 5,462 incidents in first four months of 2026 (3x faster pace)
• +3 more outcomes

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability9 records

Feature6 records

Partnerships

14 partnerships are on record, tiered core.

• AxurcoreTechnology or IntegrationAxur is a leader in external cybersecurity, specialized in protecting businesses against threats outside internal perimeters. Uses advanced AI including GenAI and LLM for detecting and neutralizing digital fraud, piracy, and data leaks. Services include malicious content takedown, phishing protection, and cyber threat intelligence (CTI).
• AzioncoreTechnology or IntegrationAzion is a leading edge computing platform helping organizations build, protect, and scale applications anywhere with high performance. Through serverless architecture and global distributed network, enables content and application delivery with minimal latency and integrated security.
• BeyondTrustcoreTechnology or IntegrationLeader in intelligent identity and access security. Products include password vault, secure remote access, remote support, endpoint privilege management, cloud infrastructure entitlement management, ITDR (Identity Threat Detection and Response), and ISPM (Identity Security Posture Management).
• CymulatecoreTechnology or IntegrationPioneer in Continuous Threat Exposure Management (CTEM), offering a security validation platform allowing companies to simulate real attacks continuously and safely. Helps identify defensive gaps and prioritize remediation based on real exploitation risk.
• DynatracecoreTechnology or IntegrationGlobal company combining advanced observability, AIOps, and application security in an open unified platform. Helps teams innovate faster with less risk, operate more efficiently and proactively, and deliver better business outcomes. Strong partnership for application performance management.
• ForescoutcoreTechnology or IntegrationOnly automated cybersecurity vendor with a single platform to continuously identify and mitigate risks across all managed and unmanaged assets - IT, IoT, IoMT, and OT. Delivers innovations protecting largest and most trusted organizations in financial, government, healthcare, manufacturing sectors.
• ProofpointcoreTechnology or IntegrationLeader in cybersecurity protecting organizations' greatest risks and most valuable assets: people. Integrated cloud-based solutions help companies worldwide stop targeted threats, protect data, and make users resilient against cyber attacks. Includes 75% of Fortune 100 companies as customers.
• SailPointcoreTechnology or IntegrationGlobal leader in identity governance and security, offering complete visibility and control over who has access to what resources. Uses AI to automate complex identity processes, ensuring compliance and reducing risks of unauthorized access.
• Skyhigh SecuritycoreTechnology or IntegrationSSE portfolio includes Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Private Access (Zero Trust), and Cloud-Native Application Protection Platform (CNAPP) for comprehensive cloud security.
• SnykcoreTechnology or IntegrationDeveloper-focused security platform enabling technology teams to find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code from the start. Essential for companies implementing DevSecOps culture.
• TenablecoreTechnology or IntegrationGlobal leader in exposure management offering innovative solutions to understand, prioritize, and reduce cyber risks across organizations. Platform Tenable One offers holistic attack surface visibility from endpoints to OT and cloud applications.
• TrellixcoreTechnology or IntegrationEmerged from McAfee Enterprise and FireEye merger, developing integrated AI-powered and automation-driven security platform. Solutions include EDR/XDR for endpoint protection, NIPS for network protection, and DLP for data protection.
• Trend MicrocoreTechnology or IntegrationGlobal cybersecurity leader protecting the world for digital information exchange. Platform protects over 500,000 organizations and 250 million individuals across clouds, networks, devices, and endpoints. Operates threat laboratories worldwide.
• XM CybercoreTechnology or IntegrationLeader in hybrid cloud exposure management transforming how organizations approach cyber risk. Demonstrates how attackers leverage and combine misconfigurations, vulnerabilities, and identity exposures in AWS, Azure, GCP, and On-Premises environments.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Optiv: Large US-based security solutions integrator and MSSP with broad services portfolio — comparable in multi-vendor integration, professional services, and managed security delivery model.
• Mandiant (Google Cloud): Global incident response and threat intelligence leader (now part of Google Cloud) offering managed defense, consulting, and SOC services — comparable at the high end of the market Scunna targets and increasingly active in Brazil.
• Deloitte Cyber (Brazil): Big Four cybersecurity practice offering SOC, cyber consulting, and managed services in Brazil — competing for the same enterprise consulting and security services wallet as Scunna at a larger scale.

Emerging players

• AXUR: Brazilian cybersecurity vendor focused on external threat protection, digital fraud, phishing takedown, and brand protection — overlapping with Scunna's cyber-fraud convergence and existing partner ecosystem (AXUR is already a Scunna partner).

Direct peers

• Trustwave: Global cybersecurity services firm offering MDR, SOC, consulting, and managed security services — comparable across Scunna's full services portfolio with overlap in enterprise clients and MSSP delivery.
• Cipher (Prosegur Cybersecurity): Latin American MSSP acquired by Prosegur, providing managed detection and response, SOC, and cybersecurity services across Brazil and Spanish-speaking Americas — overlapping target segments, delivery model, and managed SOC positioning.
• eSentire: Global pure-play MDR provider with 24x7 SOC operations, threat hunting, and managed detection — directly comparable managed SOC service model and mid-to-large enterprise target segment.
• Stefanini Cybersecurity: Brazilian IT services giant with a cybersecurity practice offering SOC, managed security, and consulting — comparable in local market presence, delivery scale, and enterprise/government client base.
• Tempest Security Intelligence: Brazilian cybersecurity company offering managed SOC, incident response, threat intelligence, and consulting services to mid-market and enterprise clients across Brazil — directly comparable in geography, service portfolio, and target customer profile.
• Arctic Wolf: Global MDR/managed security services provider delivering 24x7 SOC-as-a-service to mid-market organizations — directly comparable in security operations, XDR-style delivery, and mid-market enterprise customer focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/scunna
• Facebookfacebook.com/ScunnaBR
• LinkedInlinkedin.com/company/scunna

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Scunna