Daryus

What Daryus does

Daryus is a Brazilian professional services firm headquartered in São Paulo, founded in 2005 (conceived in 1998) and operating for more than two decades under a unified DARYUS brand following the 2024-2026 consolidation of its consulting and education arms. The consulting division (Daryus Consultoria) delivers bespoke engagements in cybersecurity, business continuity, information security, corporate governance and IT management, data privacy (LGPD compliance), cloud security assessment, and Microsoft Secure Workplace. The education division (Instituto Daryus, formerly IDESP) offers postgraduate and MBA programs plus certification preparation through accredited partnerships with EXIN, IAPP, PECB, DRII, PeopleCert, and Microsoft. Named enterprise clients span insurance (SulAmérica), healthtech (Samplemed, AGE Technology), and conversational AI (Blip), with engagements typically targeting ISO 27001 and ISO 22301 certification outcomes.

The firm monetizes through day-rate and fixed-price consulting engagements, cohort- and tuition-based education programs, and commission-based cyber insurance distribution via a partnership with Howden (Cyber+ product). Demand is generated through a multi-channel GTM combining direct enterprise sales, a Microsoft partner ecosystem channel, community-led education (Instituto Daryus), and event-driven demand generation anchored by the Global Risk Meeting (17 editions) and annual research publications (Panorama Cyber Insights, Cyber 360°). The company holds Microsoft Gold Partner and Learning Partner status and was certified as a Great Place to Work in 2021.

The underlying technology is services-led rather than product-led: Daryus does not develop proprietary software platforms, but applies industry-standard frameworks (ISO 27001, ISO 22301, NIST CSF, CIS Controls, DORA, LGPD, GDPR) and Microsoft technology stacks as part of its delivery. No proprietary AI/ML products, APIs, or patents are disclosed in available sources. Revenue figures, headcount, and funding are not publicly disclosed; the firm is privately held with no external investment indicated.

Name

Daryus

Legal name

Daryus

Website

https://daryus.com.br

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

11–50 employees

Short description

Daryus is a privately held Brazilian professional services firm in São Paulo providing cybersecurity, business continuity, risk management, and data privacy consulting, complemented by postgraduate education and certification training, serving enterprise and mid-market clients across banking, insurance, healthcare, and technology sectors.

Ownership category

akta.pro rank

Product category

Cybersecurity and Risk Management Consulting

NAICS

Other Scientific and Technical Consulting Services (54169), Computer Training (611420), Computer Systems Design and Related Services (54151)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Computer Programming, Data Processing, Etc. (7370), Services-Educational Services (8200)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

akta.pro secondary industries

Cloud Computing & Cloud Security (EDAOAIAC), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)

Keywords

• Cybersecurity consulting
• Information security services
• Business continuity consulting
• Data privacy compliance
• Risk management advisory

Headquarters

HQ city

São Paulo

HQ country

Brazil

HQ region

Latin America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Consulting Services: Daryus generates revenue primarily through bespoke consulting engagements in cybersecurity, business continuity, information security, governance/risk/compliance, privacy and data protection, and cloud security assessment. These are sold as professional services engagements, typically project-based with defined scopes and deliverables. Revenue is driven by day-rate consulting fees and fixed-price project engagements for enterprise clients.
2. Education and Training: The education division (Instituto Daryus) generates revenue through postgraduate degree programs (MBA and specialization courses), professional certification training (EXIN, IAPP, PECB, Microsoft, DRII, PeopleCert), and corporate training. Courses are offered in both in-person and online formats, with certification exam proctoring. This provides a recurring revenue stream through new cohort enrollments and ongoing professional development.
3. Cyber Insurance Distribution: Through a partnership with Howden, Daryus distributes the Cyber+ cyber insurance product, earning commissions on policies sold. The company offers free risk diagnostics to prospects as a lead generation tool for insurance upsell.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels8 records

Core offering

Daryus is a Brazilian professional services firm that delivers consulting engagements in cybersecurity, cloud security assessment, business continuity, information security, corporate governance and IT management, privacy and data protection, and Microsoft Secure Workplace. The firm also operates an education division (Instituto Daryus) offering postgraduate programs, MBAs, and accredited certification training (EXIN, IAPP, PECB, Microsoft, DRII, PeopleCert), and distributes a cyber insurance product (Cyber+) through a partnership with Howden.

Product overview

Daryus is a Brazilian consulting and education company specializing in risk management, business continuity, information security, and cybersecurity. The company operates under two main divisions: Daryus Consultoria (consulting services) and Instituto Daryus (education and training). The consulting arm offers specialized services including Cybersecurity Consulting, Cloud Security Assessment, Business Continuity, Information Security, Corporate Governance and IT Management, Privacy and Data Protection, and Microsoft Secure Workplace, alongside a cyber insurance partnership with Howden. The education division provides postgraduate programs and professional certifications in areas such as Cybersecurity Offensive, Cyber Defense, Cyber Threat Intelligence, Digital Forensics, Risk Management, and Compliance. Daryus also publishes annual research reports including Panorama Cyber Insights and Cyber 360, and organizes industry events such as the Global Risk Meeting.

Differentiator

Problem solved

Functional benefit

Brands

• Instituto Daryus: Professional education institution offering postgraduate programs, courses, and certifications in risk management, business continuity, information security, cybersecurity, digital forensics, and data privacy.

Products and services

• Cybersecurity Consulting (Cibersegurança)

Quantifiable outcome

• 100,000+ professionals impacted through content, events, and training programs
• +5 more outcomes

Named customers6 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Seven partnerships are on record, tiered core and minor.

• HowdencoreChannel Partner/ Reseller/ DistributorDaryus partnered with Howden to distribute the Cyber+ cyber insurance product to its consulting client base. The partnership enables Daryus to offer end-to-end cyber risk management, combining consulting services with insurance coverage. Daryus uses a free risk diagnostic as a lead generation tool to qualify prospects for the insurance product. Howden provides the insurance product, underwriting, and policy administration while Daryus drives client acquisition and initial risk assessment.
• MicrosoftcoreTechnology or IntegrationDaryus holds Microsoft Gold Partner and Learning Partner status, enabling the company to sell and implement Microsoft solutions (Microsoft Secure Workplace, Microsoft 365 assessments) and deliver official Microsoft training. The partnership provides access to Microsoft tools, support, and co-selling opportunities, and validates Daryus's technical capabilities in Microsoft environments.
• EXINminorOthersEXIN is a certification body for IT and security professionals. Daryus offers EXIN-accredited training programs through its education platform, helping professionals prepare for and obtain EXIN certifications in areas such as information security, business continuity, and IT service management.
• IAPPminorOthersIAPP (International Association of Privacy Professionals) is a leading privacy certification body. Daryus offers IAPP-accredited training for certifications including Certified Data Privacy Professional (CDPP/CDPO) and Certified Information Privacy Manager (CIPM), supporting Brazilian professionals in obtaining globally recognized privacy credentials.
• PECBminorOthersPECB is a certification body offering professional certifications in information security, risk management, and business continuity. Daryus provides PECB-accredited training programs to prepare professionals for PECE certifications in ISO 27001, ISO 22301, and related standards.
• DRII (Disaster Recovery Institute)minorOthersDRII is the international professional body for business continuity. Daryus is the only organization in Brazil that supports and represents DRI International, hosting the GRC+DRIDay Latin America event and offering DRI-certified training programs for Business Continuity Professionals.
• PeopleCertminorOthersPeopleCert is a global examination and certification body for professionals and languages. Daryus offers PeopleCert examination services as part of its professional training portfolio.

Scale indicators8 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• Mandiant (Google Cloud): Global incident response and cyber risk consulting firm. Comparable to Daryus's cybersecurity and incident response consulting, but operating at much larger scale with broader geographic reach and productized offerings.
• Deloitte Brazil (Cyber & Strategic Risk practice): Deloitte Brazil's cybersecurity, privacy, and risk advisory practice. Comparable to Daryus on enterprise cybersecurity and LGPD/DORA consulting but as part of Big 4 multi-disciplinary portfolio rather than specialized niche.
• Stefanini: Major Brazilian-founded global IT services and consulting firm with cybersecurity and GRC practices. Broader incumbent that competes with Daryus on enterprise risk/security consulting but with a much wider portfolio across IT, digital, and BPO.

Direct peers

• SANS Institute: Global cybersecurity training and certification provider. Directly comparable to Instituto Daryus's accredited training programs (EXIN, IAPP, PECB, DRII, Microsoft) and certification-preparation business model.
• ISH Tecnologia: Brazilian cybersecurity and infrastructure services provider covering managed security, consulting, and compliance. Comparable to Daryus across enterprise security services and certification support in Brazil.
• ISACA: Global association for IT governance, risk, and cybersecurity professionals (CISA, CISM, CRISC). Comparable to Daryus's governance, risk, and compliance training/certification practice and ISO-aligned education programs.
• (ISC)²: Global cybersecurity professional certification body (CISSP, CCSP). Comparable to Daryus's role as a training and certification delivery partner for major security credentials in Brazil.
• Tempest Security (formerly Clavis): Brazilian cybersecurity consultancy offering offensive security, incident response, and risk/compliance services. Most directly comparable to Daryus's consulting arm in the Brazilian market, serving similar enterprise customers with adjacent ISO 27001/LGPD offerings.
• 4Linux: Brazilian open-source and IT training/consulting firm with strong certification programs (Linux, cloud, security). Closely comparable to Instituto Daryus's training-and-certification model in the Brazilian market.
• Nexus Group (Nexus Technology and Business Consulting): Brazilian risk, GRC, and cybersecurity consultancy. Directly comparable consulting practice targeting large Brazilian enterprises with ISO, privacy, and business continuity mandates similar to Daryus's core offerings.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/DARYUSBR
• YouTubeyoutube.com/daryustalks
• Facebookfacebook.com/daryusbr
• LinkedInlinkedin.com/school/daryus-consultoria-treinamento
• Instagraminstagram.com/daryusbr

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Daryus