Skip to content

Choose what the site may keep in your browser. Only the necessary item is on by default. Cookie policy

Information security consulting

Provisional translation, under review.

Protect what you build.

Hegeon runs the assessment with your team and delivers the work on the CyberArmor platform. Every deliverable is recorded, with dates.

Our platform

Software built in-house and used by our consulting team every day.

CyberArmor

Imports what your security tools find, merges repeated results into a single finding and drafts the executive report.

See CyberArmor
Actual platform screen, from a test account.

Consulting: start with a fixed project

Each project takes 2 to 4 weeks and has a fixed price. At the end, you receive the report.

  1. 30 days

    AI use assessment

    Shows which AI tools the company uses and what personal or confidential data shows up in them.

    Fixed price quoted within 1 business day

  2. 2 to 3 weeks

    Code X-ray

    Shows the software flaws an attacker can reach, in priority order.

    Fixed price quoted within 1 business day

  3. 2 weeks

    Machine assessment

    Compares the configuration of servers and workstations with public secure configuration benchmarks.

    Fixed price quoted within 1 business day

See consulting

Solutions by challenge

Pick the problem your company has today.

  • Secure development

    A client asked for proof that your software is secure. Your development team has no security specialist.

    • Code and dependency X-ray
    • Findings in priority order, with fix guidance
    • Application penetration test (pentest)
    See Secure development
  • Infrastructure

    Every server was set up a different way. The auditor wants proof of configuration.

    • Machine assessment
    • Hardening based on public secure configuration benchmarks and your policy
    • Monitoring and response under contract, during the agreed hours and SLA
    See Infrastructure
  • Governance and compliance

    LGPD or ISO 27001 now has a deadline. The evidence is scattered.

    • LGPD compliance and ISO/IEC 27001 readiness
    • On-demand security officer (vCISO)
    • Security awareness with phishing simulation
    See Governance and compliance
  • Secure AI use

    Employees use AI at work. The board does not know what data goes into it.

    • AI use assessment in 30 days
    • Inspection of Brazilian personal data and attachments
    • Report and AI use policy
    See Secure AI use

How we work

Five steps. In each one, you receive a concrete deliverable.

  1. Assessment

    We learn your environment, the policies your company already has and what the auditor or your client is asking for.

    You receive: a picture of the starting point, with the most urgent risks.

  2. Prioritized plan

    We order the work by business risk and by the deadline you need to meet.

    You receive: the plan with priorities, owners and dates.

  3. Execution by our analysts

    An assigned analyst carries out the plan within the rules of your environment. Every action is recorded.

    You receive: the fixes applied and the record of each one.

  4. Continuous monitoring

    After delivery, we keep watching configuration, vulnerabilities and controls. Your environment changes every week.

    You receive: drift alerts and up-to-date evidence on the platform.

  5. Executive report

    Each cycle ends with a report written for the board.

    You receive: the report and dated evidence, ready for the audit.

Resources

Security bulletin, guides in Portuguese and a free AI use self-assessment with no sign-up.

See resources

Talk to a specialist for 30 minutes.

Tell us what your company needs. You leave the call with three priorities for your environment.

Talk to a specialist

Prefer to write? Use the email contato@hegeon.com.br.

Arrow keys or swiping change the screen. Pinch or double tap to zoom. Esc closes.