Dark Web Monitoring
We continuously check whether data from your company or your social accounts is exposed on the dark web: credentials, documents and sensitive information.
Request an assessmentWhat an attacker would find
in your company?
We find it first.
Red Team · Threat Intelligence · Attack Surface · Offensive Security
Terms with a dotted underline have an explanation: hover, tap or navigate with the keyboard.
13+
Years in business
500+
Clients protected
24/7
Incident response
Global reach
// Services
Protection Across Every Attack Vector
We combine an offensive mindset with proactive defense. Every service is designed to anticipate and neutralize real threats.
Pentest and Intrusion Testing
Our team runs real intrusion tests on networks, applications and infrastructure to identify and exploit vulnerabilities before the adversary does.
Request an assessmentMalware Reverse Engineering
We analyze and reverse engineer malware to identify the origin of the attack, the behavior of the malicious code and the indicators of compromise.
Request an assessmentDigital Forensics
Technical investigation of cyber incidents to determine how the attack happened, collect evidence and support legal action.
Request an assessmentSocial Media Protection
Full protection for your accounts on Instagram, LinkedIn, Facebook and other platforms against cloning, takeover, phishing and profile hijacking.
Request an assessmentRed Team Operations
Complete APT attack simulations, with social engineering and physical and digital intrusion, to assess your organization's real resilience.
Request an assessmentIncident Management
When the attack happens, we move fast: containment, eradication, recovery and a full forensic report of the incident.
Get help nowOSINT and Intelligence
Collection and analysis of open source information to map the attack surface, track threat actors and protect your digital exposure.
Request an assessmentCrisis Simulations (Cyber Drills)
Tabletop exercises and realistic crisis simulations to train technical and executive teams for the worst-case scenario.
Request an assessment// Why Nocera
Excellence That Comes From Real Experience
We do not sell theory. Every service is grounded in real incidents resolved over more than 13 years.
Battle Tested
We have reverse engineered ransomware such as STOP/DJVU and REvil and restored operations for pulp and paper, metallurgy and financial companies in Canada. When the situation is serious, you want people who have been there.
Rapid Mobilization
We prioritize critical incidents. We start containment and the remote strategy while others are still scheduling calls.
Total Confidentiality
Strict NDAs and encrypted communication channels (Signal and PGP) are standard on every engagement. Your crisis, our confidentiality.
// Methodology
Strategic Incident Response Roadmap
A 9-phase methodology aligned with NIST and CISA standards, from the first alert to continuous improvement.
01
Activation
Activation of the incident response plan, notification to legal and insurance and preservation of evidence.
02
Identification
Scope confirmation, log preservation and identification of the Patient Zero, the first compromised system.
03
Containment
Network isolation, disabling of compromised accounts and interruption of lateral movement.
04
Investigation
Root cause analysis, attacker mapping and assessment of exposed data.
05
Legal Aspects
Breach assessment, notification to authorities (ANPD and LGPD) and compliance verification.
06
Eradication
Malware removal, system rebuild and reset of compromised credentials.
07
Recovery
Data restoration, validation with the business and activation of enhanced monitoring.
08
Communication
Internal guidance, notification of affected customers and management of the public message.
09
Continuous Improvement
Post-incident analysis, security hardening and updates to policies and playbooks.
Activate incident response Team available 24/7 for emergencies.
// About us
Who is behind Nocera
Nocera Information Security ME® brings together more than 13 years of experience in offensive security, incident response and cyber intelligence. We serve companies, governments and people who need real protection, always under NDA and with a method.
// Articles
Articles and Research
Vulnerabilities, investigations and threats analyzed with technique.
Original exploit
CitrixBleed 2: memory dump, exploitation and detection
In-depth technical analysis of the CitrixBleed 2 vulnerability, demonstrating the memory dump, the exploitation vectors and the detection techniques. Original research published by Guilherme Nocera.
ResearchExploitDetection
2024Read on Medium
Investigation · TecMundo
Data on 500 thousand Brazilians exposed in clinic system
A critical flaw in the STDoctor system exposes patient data (tax IDs, exam photos and payment details) circulating in criminal groups on Telegram.
Sep 2025Read on TecMundo
Investigation · TecMundo
55 thousand Brazilians may face near perfect scams by email and SMS
A trojan stealer captured credentials from city hall employees, granting access to the internal dashboard and exposing 55 thousand residents to targeted attacks.
Jul 2024Read on TecMundo