Stefanini Cyber

What Stefanini Cyber does

Stefanini Cyber is the dedicated cybersecurity division of Brazilian multinational Grupo Stefanini, formed in 2024 through the consolidation of three pre-existing security brands (Stefanini's cyber unit, Safeway, and Protega) into a single unified platform. The company delivers end-to-end managed and professional cybersecurity services across eight core solution areas: application security (DevSecOps), risk assessment (penetration testing, vulnerability scanning, EASM), security architecture (XDR, IAM/PAM/IGA, SSE), security operations (24/7 SOC, MDR, SIEM, threat intelligence, DFIR), frameworks and compliance (ISO 27001, NIST, Zero Trust, IEC 62443), physical/OT-IoT security, security awareness training, and its proprietary SAI AI platform. Five Security Operations Centers in Brazil, Peru, India, and Romania provide 24x7 coverage to over 500 clients across more than 100 countries, with notable vertical concentration in financial services, healthcare, government, manufacturing, oil and gas, mining, and critical infrastructure.

The technology stack is anchored by the proprietary SAI (Stefanini Artificial Intelligence) platform with 12 years of applied AI history, the newly launched CROC (Cyber Risk Operating Center) for real-time risk quantification on NIST 800-030, NIST 800-060, and MITRE ATT&CK frameworks, and deep integrations with Google Cloud SecOps, Mandiant Threat Intelligence, and 19+ technology partners including Microsoft, IBM, Fortinet, Cisco, and Nozomi Networks. Revenue is generated through a mix of managed services subscriptions (MSS/MDR), professional consulting engagements, and an emerging recurring AI-product stream (SAI Safe 24x7, SAI MDR, SAI Low Risk), with quote-based enterprise pricing and no public rate card. The go-to-market is direct enterprise field sales augmented by hyperscaler and technology partner co-sell channels, targeting large corporations and government organizations. Leadership is structured as Leidivino Natal (Global CEO), Umberto Rosti (Brazil CEO), and Gustavo Pereira (Global Strategy & Business Development), operating under Grupo Stefanini's committed R$2 billion M&A investment plan through 2027.

Name

Stefanini Cyber

Legal name

Stefanini Cyber

Website

https://stefaninicyber.com

Company type

Private

Founded year

1987

Operating status

Operating

Headcount range

501–1,000 employees

Short description

Stefanini Cyber is the cybersecurity division of Brazilian multinational Grupo Stefanini, delivering end-to-end managed security, risk assessment, OT/IoT protection, and AI-driven threat detection (via its proprietary SAI platform and CROC product) to over 500 enterprise and government clients across 100+ countries from five global SOCs.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519), Custom Computer Programming Services (541511)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Application Security & Secure Software (DevSecOps) (EDAOAIAK)

Keywords

• Managed security services
• Cybersecurity consulting
• OT/IoT security
• AI threat detection
• Security operations center

Headquarters

HQ city

São Paulo

HQ country

Brazil

HQ region

Latin America

Offices5 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Managed Security Services (MSS/MDR): 24x7 Security Operations Center monitoring, managed detection and response, threat hunting, and incident management services. Operates five SOCs globally including MSSP services powered by Google Cloud.
2. Professional Security Consulting: Security consulting including risk assessment, penetration testing, vulnerability scanning, compliance assessments, and security architecture implementation services.
3. AI-Powered Solutions (SAI): Proprietary AI cybersecurity products including SAI Safe 24x7, SAI MDR, and SAI Low Risk, as well as GRC and Trust solutions.

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

Stefanini Cyber delivers end-to-end managed cybersecurity services and proprietary AI-powered products to enterprise and government customers. Offerings span Application Security (DevSecOps), Risk Assessment (penetration testing, EASM), Security Architecture (XDR, IAM/PAM/IGA), Security Operations (24/7 SOC, MSS/MDR, SIEM, Threat Intelligence), Frameworks and Compliance (ISO 27001, NIST, Zero Trust), OT/IoT security, security awareness training, and proprietary AI platforms SAI and CROC.

Product overview

Stefanini Cyber is a one-stop-shop cybersecurity platform providing end-to-end solutions across eight core service areas: Application Security (DevSecOps), Risk Assessment (penetration testing, vulnerability scanning, EASM), System Architecture (XDR, IAM/PAM/IGA, SSE), Security Operations (SOC 24/7, MDR, SIEM, Threat Intelligence), Frameworks and Compliance (ISO 27001, NIST, Zero Trust), Physical Security (OT/IoT), User Education (security awareness), and SAI (AI-powered threat detection and response). The platform is unified following the 2024 consolidation of Safeway and Protega, with AI applied throughout via the SAI platform and CROC product for proactive risk management.

Differentiator

Problem solved

Functional benefit

Brands

• SAI - Stefanini Artificial Intelligence: AI-powered cybersecurity platform offering SAI Safe 24x7, SAI MDR, and SAI Low Risk solutions
• CROC - Cyber Risk Operating Center
• Cyber OT

Products and services

• Application Security DevSecOps and Squads-based application security services implementing security-by-design principles and automating security controls throughout the software development lifecycle, aimed at enterprise development teams and software-producing organizations.
• Risk Assessment Vulnerability assessment services including penetration testing, social engineering tests, vulnerability scanning, and External Attack Surface Management (EASM) for enterprises needing to identify and remediate security exposures.
• System Architecture Security architecture solutions covering Extended Detection and Response (XDR), Automated Malware Detection, Security Service Edge (SSE), Identity Access Management (IAM), Privileged Access Management (PAM), and Identity Governance Administration (IGA) for enterprise security teams.
• Security Operation Managed security services including 24/7 SOC monitoring, Threat Hunting, DFIR, Vulnerability Management, Cyber Threat Intelligence, MSS/MDR, and SIEM, featuring AI-powered detection and response capabilities for enterprise security operations.
• Frameworks and Compliance Cybersecurity governance and compliance services supporting ISO 27001, NIST CSF, NIST 800-207 (Zero Trust), IEC 62443, NIST 800-82r3, CIS, and GRC frameworks for organizations needing to meet regulatory and audit requirements.
• Physical Security - Cyber OT & IoT Operational Technology (OT) and IoT cybersecurity solutions for industrial environments, manufacturing, oil and gas, mining, and critical infrastructure protection, including SCADA monitoring and AI-based anomaly detection.
• User Education Security awareness training programs including AI-powered phishing campaigns, gamified testing, secure development practices training, and cybersecurity mindset transformation for enterprise workforces.
• SAI - Stefanini Artificial Intelligence Proprietary AI-powered cybersecurity platform offering SAI Safe 24x7, SAI MDR, and SAI Low Risk products, providing AI-based threat detection, incident response automation, and risk management capabilities for enterprise customers.
• CROC - Cyber Risk Operating Center Cyber Risk Operating Center that monitors, quantifies, and manages cybersecurity risks automatically, continuously, and in real time. Based on NIST 800-030, NIST 800-060, and MITRE ATT&CK frameworks, providing 24x7 monitoring of attack surfaces and proactive risk identification before incidents occur.

Quantifiable outcome

• Expected global revenue above R$ 200 million following consolidation
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability10 records

Feature5 records

Partnerships

19 partnerships are on record, tiered core and major.

• Google Cloud (Google SecOps)coreTechnology or Integration · 1 June 2026Strategic MSSP partnership where Stefanini Cyber delivers managed security services powered by Google Cloud SecOps platform. Combines global expertise with Google Chronicle for detection, response, and threat intelligence. Includes Mandiant Threat Intelligence integration and Google Cloud Security Command Center visibility.
• Mandiant (Google Cloud)coreTechnology or Integration · 1 June 2026Threat intelligence partnership providing organizations with intelligence on threat actors and emerging cyber threats. Part of the Google SecOps ecosystem offering actionable threat information.
• MicrosoftmajorTechnology or IntegrationTechnology partner providing cloud security integration and Microsoft security product expertise within the Stefanini Cyber ecosystem.
• IBMmajorTechnology or IntegrationSecurity technology partner, particularly IBM Security QRadar SIEM integration mentioned in content.
• FortinetmajorTechnology or IntegrationNetwork security technology partner providing next-generation firewall and security fabric solutions.
• CiscomajorTechnology or IntegrationSecurity technology partner providing network security and collaboration protection solutions.
• Trend MicromajorTechnology or IntegrationEndpoint and hybrid cloud security technology partner.
• TenablemajorTechnology or IntegrationExposure management and vulnerability management technology partner.
• Nozomi NetworksmajorTechnology or IntegrationOT and IoT security technology partner for industrial control systems and operational technology environments.
• VeracodemajorTechnology or IntegrationApplication security testing technology partner for DevSecOps solutions.
• ForcepointmajorTechnology or IntegrationData loss prevention and web security technology partner.
• IHM (Grupo Stefanini)coreStrategic or Co-development PartnerInternal strategic partnership with IHM Stefanini for industrial automation, co-developing Cyber OT solutions for operational technology environments.
• ProofpointmajorTechnology or IntegrationEmail security and compliance technology partner.
• CybersixgillmajorTechnology or IntegrationDark web threat intelligence platform partner for threat monitoring.
• AxurmajorTechnology or IntegrationDigital risk protection and brand monitoring technology partner.
• ApuramajorTechnology or IntegrationCybersecurity threat intelligence partner.
• Deceptive BytesmajorTechnology or IntegrationDeception technology partner for advanced threat detection.
• SIGAmajorTechnology or IntegrationSecurity intelligence and analytics technology partner.
• SAI SuitemajorTechnology or IntegrationAI-powered security automation technology partner.

Scale indicators7 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• Accenture Security: Security arm of Accenture, providing strategy, consulting, managed services, and incident response at global scale. Competes for the same enterprise MSSP and OT/ICS security deals Stefanini Cyber targets, but with vastly larger delivery footprint.
• Deloitte Cyber: Big Four cyber advisory and managed services practice with strong OT/ICS and risk quantification offerings. Competes with Stefanini Cyber's consulting, compliance, and CROC-style risk monitoring propositions for board-level buyers.
• Tata Consultancy Services (Cybersecurity): Global IT services giant with a sizeable cybersecurity practice covering managed SOC, identity, and OT security. Competes with Stefanini Cyber for enterprise SOC outsourcing, especially for multinationals seeking offshore delivery.
• Cognizant Security: Global IT services provider with a dedicated cybersecurity practice spanning managed SOC, identity, and application security. Competes for the same enterprise outsourcing and DevSecOps mandates Stefanini Cyber addresses.
• IBM Security Services: Part of IBM, offering managed security, SIEM (QRadar), and consulting. Direct overlap with Stefanini Cyber's QRadar-based SOC services and broad cybersecurity advisory, supported by an extensive global services organization.

Regional players

• TIVIT: Brazilian-headquartered digital and IT services provider with a growing cybersecurity practice. Directly comparable regional competitor within LatAm enterprise and BFSI segments.

Direct peers

• Secureworks: Pure-play global MSSP offering managed detection and response, threat hunting, and 24x7 SOC services. Direct competitor to Stefanini Cyber's Security Operations line, with a comparable enterprise customer base and similar reliance on partner SIEM/XDR platforms.
• NCC Group: UK-listed cybersecurity specialist providing managed detection, threat intelligence, consulting, and OT/industrial security services. Highly comparable to Stefanini Cyber's blend of MSSP, advisory, and OT capability.
• Trustwave: Global MSSP and cybersecurity services firm providing MDR, SOC, consulting, and database security. Closely comparable to Stefanini Cyber's one-stop-shop positioning across managed services, professional services, and OT-relevant advisory work.
• Logicalis (Cybersecurity Services): Global IT services and managed services provider with a dedicated cybersecurity portfolio spanning SOC, MDR, and OT security. Comparable to Stefanini Cyber's MSSP-led, partner-integrated model and similar enterprise customer profile.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/stefaninicyber
• Instagraminstagram.com/stefanini_cyber

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Stefanini Cyber