Box Group
Box Group is a Brazilian managed cybersecurity services provider founded in 2010, operating a 24x7 SOC and modular security portfolio (MDR, vulnerability management, PAM, XDR, GRC) for enterprise clients across 8 countries, with 44,000+ monitored users and ISO/IEC 27001:2022 certification.
- Company typePrivate
- Founded2010
- HeadquartersCuritiba, Brazil
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Box Group does
Box Group is a privately held Brazilian cybersecurity services provider founded in 2010 and headquartered in Curitiba. The company delivers an integrated managed security portfolio anchored by a 24x7 Security Operations Center (SNOC) that monitors more than 44,000 users across client environments, complemented by Managed Detection and Response (MDR), CSIRT incident response, vulnerability management, firewall management, privileged access management, identity management, DevSecOps, governance/risk/compliance, brand abuse intelligence, security awareness training, and add-on modules for XDR and WAF. Underlying technology combines SIEM/SOAR, User Behavior Analytics, endpoint and network telemetry, and AI/ML-driven detection layered on top of best-of-breed vendor platforms including Palo Alto Networks, CyberArk, SentinelOne, and Recorded Future.
The business operates on a multi-year, modular managed-services model combining recurring SOC contracts, professional services engagements, and software licensing, with quote-based pricing and no publicly disclosed tiers. Box Group sells primarily to large enterprises through a consultative direct sales motion supported by technology partner channels, targeting verticals including financial services, manufacturing, agribusiness, automotive/urban mobility, retail, education, and e-commerce. The firm serves customers across 8 countries (Brazil, Argentina, Colombia, USA, Mexico, Romania, Portugal, Spain, Luxembourg) and holds ISO/IEC 27001:2022 certification (BSI) with documented LGPD compliance expertise. Strategic differentiators include regulatory credentials, 80+ technical certifications, multi-vendor integration capability, and three consecutive years of Great Place to Work recognition, while remaining founder-controlled with no disclosed institutional funding rounds.
Box Group firmographics
Firmographics- Name
- Box Group
- Legal name
- BOXGROUP
- Website
- https://boxgroup.net.br
- Company type
- Private
- Founded year
- 2010
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Box Group is a Brazilian managed cybersecurity services provider founded in 2010, operating a 24x7 SOC and modular security portfolio (MDR, vulnerability management, PAM, XDR, GRC) for enterprise clients across 8 countries, with 44,000+ monitored users and ISO/IEC 27001:2022 certification.
- Ownership category
- akta.pro rank
Box Group industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Management Services (8741)
- akta.pro primary industry
- Security Operations Center (SOC) as a Service (BPAEADAB)
- akta.pro secondary industries
- Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where Box Group is headquartered
LocationHeadquarters
- HQ city
- Curitiba
- HQ country
- Brazil
- HQ region
- Latin America
Offices1 record
Markets served
Box Group business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed SOC Services: 24x7 Security Operations Center services providing continuous monitoring, threat detection, incident response, and vulnerability management. Offered as managed services with modular components allowing clients to select services appropriate to their context.
- Professional Services: Consulting and implementation services including governance establishment, hardening, security awareness training, incident response team deployment, and technical integration. Modular engagement model.
- Security Software Licensing: Sale and management of security software solutions including endpoint protection, firewall management, privileged access management, and data protection tools, either as standalone licensing or bundled with managed services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Modular service architecture with customized engagement |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels8 records
Box Group product offering
Product offeringCore offering
Box Group provides managed cybersecurity services anchored by a 24x7 Security Operations Center (SOC) that monitors over 44,000 users across client environments. The core offering includes Managed Detection and Response (MDR), Incident Response (CSIRT), Vulnerability Management, Firewall Management, Endpoint Protection, Privileged Access Management, Governance Risk and Compliance (GRC), DevSecOps, Brand Abuse Intelligence, and Security Awareness Training, sold as modular service bundles to enterprise customers across multiple verticals in Brazil and eight other countries.
Product overview
Box Group is a comprehensive cybersecurity services provider offering a unified platform of managed security services. The portfolio centers on a 24x7 Security Operations Center (SOC) that serves as the core service, complemented by specialized modules including Managed Detection and Response (MDR), CSIRT incident response, Vulnerability Management, Firewall Management, Cloud Security, and DevSecOps. Additional services include Brand Abuse Intelligence, Security Awareness Training, Endpoint Protection, Privileged Access Management (PAM), Endpoint Privilege Management (EPM), Hardening, Governance Risk & Compliance (GRC), and Data Protection. Add-on capabilities include Extended Detection and Response (XDR), Web Application Firewall (WAF), Identity Management, Data Protection Management, and SECINTEL threat intelligence. The company monitors over 44,000 users across client environments and serves clients in 8 countries.
Differentiator
Problem solved
Functional benefit
Brands
- SNOC - Security Network Operations Center: 24x7 security monitoring and incident response service with continuous vigilance to identify and mitigate threats in real time.
- TECHVISION
- BOX ESG
Products and services
- Security Operations Center (SOC) 24x7 Monitoring 24x7 constant vigilance service to identify and mitigate threats in real time, reducing incident risks and ensuring business continuity. Uses User Behavior Analytics (UBA), Machine Learning and Artificial Intelligence. Currently monitors over 44,000 users across client environments. Targeted at enterprise customers requiring continuous threat monitoring.
- Managed Detection and Response (MDR) Integration and analysis of endpoint logs and events to identify anomalous behavior and respond quickly to potential attacks, leveraging SIEM/SOAR, Attack Surface Management, UBA, Machine Learning and AI. For enterprise customers needing outsourced detection and response capabilities.
- CSIRT Incident Response On-demand expert incident response team (C-SIRT) for medium and large security incidents focused on minimizing damage and ensuring business continuity during cyber attacks. Includes Incident Response retainer. For enterprise customers experiencing or anticipating security incidents.
- Vulnerability Management Continuous assessment of gaps in digital environments with practical recommendations to eliminate vulnerabilities before exploitation. Offered in three service levels from simple threat identification to complete process with patch application. For enterprise customers needing proactive vulnerability remediation.
- Firewall Management Configuration, operation and auditing of firewalls to block unauthorized access and protect network perimeter through advanced inspection, support and maintenance. For enterprise customers requiring outsourced firewall operations.
- Endpoint Protection Robust solutions to protect end devices such as computers and smartphones from malware and unauthorized access. Delivered with partners such as SentinelOne. For enterprise customers needing endpoint security at scale.
- Privileged Access Management (PAM) Management and monitoring of privileged access, protecting critical credentials and preventing internal and external abuse. Delivered in partnership with CyberArk. For enterprise customers needing to secure privileged credentials and monitor privileged sessions.
- Endpoint Privilege Management (EPM) Privilege control on devices ensuring only authorized applications and users perform sensitive actions, reducing privilege escalation risks. For enterprise customers needing to enforce least privilege on endpoints.
- Security Awareness Training Continuous employee training to transform staff into allies in attack prevention and strengthen security culture, including phishing campaigns and user behavior management. For enterprise customers needing to reduce human-factor risk.
- Brand Abuse Intelligence Monitoring and response to brand abuse threats such as phishing and fraud, protecting company reputation online through surface, deep and dark web mapping with threat intelligence from Recorded Future. For enterprise customers needing external threat and brand protection.
- Hardening Services Hardening of servers, systems and devices to minimize vulnerabilities and reduce attack surfaces, with quarterly technology group rotations. For enterprise customers needing to systematically reduce system attack surface.
- Governance, Risk and Compliance (GRC) Establishment of policies, processes and controls aligned with market best practices, promoting a proactive security posture and supporting LGPD and ISO 27001 compliance. For enterprise customers needing governance and compliance program development.
- DevSecOps Services Security approach delivered as a service, adding tools and expertise to development and operations teams, aggregated with SOC offerings. For enterprise customers needing to embed security into the software development lifecycle.
- Data Protection Planning and executing safe and efficient backup strategies ensuring data recovery in case of incidents, including disaster recovery and data security. For enterprise customers needing resilient backup and recovery operations.
- Threat Intelligence (Security Intelligence) Continuous threat analysis and valuable insights enabling proactive action against emerging attacks and vulnerabilities. For enterprise customers needing actionable threat intelligence to inform defensive priorities.
- Extended Detection and Response (XDR) Native integration of endpoint, network and cloud data into a single platform providing high visibility and high-fidelity alert correlation. For enterprise customers needing unified cross-domain detection and response.
- Web Application Firewall (WAF) Multi-vendor Web Application Firewall service providing flexibility and effectiveness, protecting web applications against a wide range of threats including OWASP Top 10. For enterprise customers needing to protect internet-facing applications.
Quantifiable outcome
- 44,000+ users monitored continuously through SOC operations
- +3 more outcomes
Companies that use Box Group
Customer profileNamed customers4 records
Segments6 records
Ideal customer profiles1 record
Box Group technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature9 records
Box Group partnerships and signals
Strategic signalPartnerships
13 partnerships are on record, tiered core, major and supporting.
- Palo Alto NetworkscoreFlagship technology partnership with Platinum-level recognition in NextWave program. Box Group serves as a NextWave Platinum Innovator Solution Provider, integrating Palo Alto Networks security platforms including next-generation firewalls, Prisma cloud security, and Cortex SIEM/XDR capabilities into service offerings.
- CyberArkcoreStrategic partnership for Privileged Access Management (PAM) and identity security solutions. Box Group integrates CyberArk's identity security platform to deliver comprehensive PAM services including credential protection, session monitoring, and privileged threat detection.
- Recorded FuturecoreThreat intelligence partnership providing brand abuse monitoring, deep/dark web scanning, and security intelligence. Box Group co-markets Recorded Future intelligence capabilities and has published joint content including the 'Cibercrime na América Latina' report.
- SentinelOnemajorEndpoint protection partnership delivering AI-powered endpoint security, endpoint detection and response (EDR), and endpoint management services through SentinelOne's autonomous platform.
- Rapid7majorVulnerability management and penetration testing partnership leveraging Rapid7's Insight platform for vulnerability identification, assessment, and remediation guidance.
- Dell TechnologiesmajorInfrastructure partnership providing scalable, secure infrastructure solutions to support cybersecurity operations and customer environments.
- Extreme NetworksmajorNetwork security partnership delivering intelligent networking solutions with AI-powered automation and Wi-Fi 7 capabilities for secure enterprise connectivity.
- ForcePointsupportingData loss prevention and web security partnership providing content security and user behavior analysis capabilities.
- Red HatsupportingOpen hybrid cloud partnership supporting secure containerization, virtualization, and DevSecOps implementations.
- TeramindsupportingInsider threat detection and employee monitoring partnership for behavioral analytics and data loss prevention.
- RainforestsupportingApplication security testing partnership providing automated security analysis and vulnerability assessment.
- Black Duck (Synopsys)supportingSoftware composition analysis partnership for open source security and license compliance in DevSecOps environments.
- AdistecmajorStrategic go-to-market partnership supporting the Tech Refresh initiative to discuss how connectivity, identity, SOC, cloud, infrastructure, governance, and threat intelligence operate within a unified operational strategy. Joint events and market development activities.
Scale indicators7 records
Recent moves6 records
Expansion highlights7 records
Box Group competitors and assessment
Company assessmentBroad incumbents
- Trustwave: Global MSSP offering managed SOC, MDR, database security and consulting with established LatAm presence. Comparable as a broader incumbent that Box Group competes against in enterprise MSSP deals.
- Secureworks: Global pure-play MSSP offering managed detection and response, vulnerability management and incident response services. Comparable as a globally scaled MSSP competing for enterprise SOC outsourcing budgets in regulated industries.
- Logicalis: Global IT services and managed services provider with significant LatAm operations including managed security offerings. Comparable as a larger systems integrator with overlapping managed SOC and cybersecurity services.
- Stefanini Group: Brazil-headquartered global IT services and digital transformation company offering cybersecurity managed services including SOC operations. Comparable as a large Brazilian IT services peer with overlapping managed security capabilities.
- CrowdStrike: Global cybersecurity leader whose Falcon platform and Falcon Complete MDR service compete directly with Box Group's endpoint, SIEM/SOAR/XDR and incident response offerings. Comparable as the dominant MDR/SOC incumbent pushing into LatAm enterprise accounts.
- Accenture Security: Global cybersecurity services arm of Accenture offering managed SOC, cyber defense and risk management with deep presence across Latin America. Comparable as a large systems integrator competing for enterprise security outsourcing mandates.
Direct peers
- Cipher (Cybersecurity): Latin American cybersecurity services firm specializing in managed detection, response, GRC and ethical hacking with operations across Brazil and other LatAm countries. Closely comparable as a regional MDR/SOC peer.
- ISH Tecnologia: Brazilian cybersecurity and managed services provider with a strong SOC, vulnerability management and consulting practice serving large Brazilian enterprises. Comparable in scale, customer profile and managed services portfolio.
- Tempest Security Intelligence: Brazilian-origin MSSP and MDR provider offering managed SOC, threat intelligence and incident response services to large enterprises in Brazil and across Latin America. Directly comparable as a homegrown LatAm competitor in the same SOC/MDR category.
Emerging players
- Arctic Wolf: Global MDR provider delivering 24x7 managed detection and response through a concierge delivery model with security operations platform. Comparable as a tech-enabled MDR alternative increasingly competing for the same enterprise MDR wallet.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Box Group social profiles
Digital presenceBox Group compliance and trust
Trust signalCompliance2 records
Box Group financial estimates
Financial estimateRevenue estimate
Valuation estimate
Box Group leadership team
Management profileNumber of profiles
Profiles2 records
Box Group funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Box Group M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Box Group
What does Box Group do?
Box Group provides managed cybersecurity services anchored by a 24x7 Security Operations Center (SOC) that monitors over 44,000 users across client environments. The core offering includes Managed Detection and Response (MDR), Incident Response (CSIRT), Vulnerability Management, Firewall Management, Endpoint Protection, Privileged Access Management, Governance Risk and Compliance (GRC), DevSecOps, Brand Abuse Intelligence, and Security Awareness Training, sold as modular service bundles to enterprise customers across multiple verticals in Brazil and eight other countries.
Is Box Group a public or private company?
Box Group is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Box Group founded?
Box Group was founded in 2010. It employs 11 to 50 people.
Where is Box Group based?
Box Group is headquartered in Curitiba, Brazil, in the Latin America region.
How does Box Group make money?
Three revenue lines are on record. Managed SOC Services are the primary driver. The others are professional Services and security Software Licensing.
Who are Box Group's main competitors?
Broad incumbents on record are Trustwave, Secureworks, Logicalis, Stefanini Group, CrowdStrike and Accenture Security. Direct peers are Cipher (Cybersecurity), ISH Tecnologia and Tempest Security Intelligence. Arctic Wolf is listed as an emerging player.
Does Box Group have an API?
No public API is recorded for Box Group.
What industry is Box Group in?
Box Group's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAEADAB, Security Operations Center (SOC) as a Service, with a secondary code of HDADAGAG, Managed Detection & Response (MDR) & SOC Services. Its NAICS code is 561621 and its SIC code is 7370.