Battle Tested
We have reverse engineered ransomware such as STOP/DJVU and REvil and restored operations for pulp and paper, metallurgy and financial companies in Canada. When the situation is serious, you want people who have been there.
// About us
Offensive security with method, confidentiality and real experience.
Nocera Information Security ME® is a Brazilian company that protects companies, governments and people by thinking like the attacker. For more than 13 years we have combined red team, incident response and cyber intelligence in a direct service.
13+
Years in business
500+
Clients protected
24/7
Incident response
Global
Operations in multiple countries
// Our philosophy
To protect, you need to think like the attacker.
Defending well requires knowing the attack up close. That is why every Nocera service is born from real incidents resolved over more than 13 years, and not from theory. We work without detours, without theater and with method.
We have reverse engineered ransomware such as STOP/DJVU and REvil and restored operations for pulp and paper, metallurgy and financial companies in Canada.
Our work includes cooperation with Interpol, international companies and government institutions, always under a bilateral NDA and absolute confidentiality.
// Why Nocera
Excellence That Comes From Real Experience
We do not sell theory. Every service is grounded in real incidents resolved over more than 13 years.
Rapid Mobilization
We prioritize critical incidents. We start containment and the remote strategy while others are still scheduling calls.
Total Confidentiality
Strict NDAs and encrypted communication channels (Signal and PGP) are standard on every engagement. Your crisis, our confidentiality.
// Principles
How we decide what we do
Rules that apply to every engagement, without exception.
Written authorization
No offensive activity starts without written authorization defining scope, targets, test windows and a responsible party. We act strictly within the agreed rules of engagement.
Absolute confidentiality
Every engagement starts with a bilateral NDA. We do not disclose client names, vulnerabilities or incidents without written authorization, not even as a success case.
Recognized method
We follow OWASP, PTES, MITRE ATT&CK and NIST SP 800-115 and deliver executive and technical reports with evidence, risk rating, impact and remediation guidance.
Fast response
We prioritize critical incidents and start triage and remote containment as soon as possible, right after the NDA is signed. The team is available 24/7 for emergencies.
// How we work
From first contact to closeout
A predictable flow, with the client informed at every step.
01
Agreement and scope
Bilateral NDA and commercial proposal with scope, rules of engagement and test windows defined in writing.
02
Execution
Activities within the authorized scope, with controlled access, multi-factor authentication and every record retained.
03
Reporting
Technical and executive delivery, with evidence, risk, impact and remediation, transmitted over encrypted channels.
04
Closeout
Secure destruction of data and access per NIST SP 800-88, written confirmation within 5 business days and post-delivery support.
// Technical leadership
Who runs every engagement
Digital ForensicsThreat HuntingMalware AnalysisIncident ResponseSocial Engineering
More than 13 years working in red team, forensic analysis, incident response and cyber intelligence, with direct service to corporations, governments and individuals who need real protection.
- Cooperation with Interpol in cyber investigations of international scope.
- Author of the original exploit CitrixBleed 2 and of technical analyses published on Medium and TecMundo.
- Open source tools, libraries and POCs available on GitHub.
// The company
Company details
- Legal name
- Nocera Information Security ME®
- CNPJ
- 24.305.640/0001-78
- Registered trademark
- NOCERAINFOSEC®
- Data protection officer (DPO)
- Guilherme Nocera
- Contact
- contato@nocerainfosec.com.br
- Operations
- Global