OFFENSIVE SECURITY · LATAM · GLOBAL
We see what hackers see.Before they do.
Black Ghost Corp is an offensive security company. We operate from Brazil to the world, combining the technical precision of a small team with the delivery standard of an elite consultancy. Pentest, red team, and continuous coverage for companies that can't afford to fail.
15+ years of combined offensive experience · Clients across LATAM and the United States · International-grade contractual documentation
Most companies don't know how they look to an attacker.
Automated scanners generate 400-page reports with 80% noise. Traditional consulting firms take weeks to start and months to deliver. The result is the same: you pay a premium, you get a PDF, and you still don't know the actual path a real adversary would take.
We solve that differently.
// SELECTED CASE STUDIES
BYD do Brasil
Validation of embedded system integrity to prevent Remote Vehicle Hijacking in vehicles with mass connectivity and ADAS/Autopilot.
View full case →IT SERVICES · HARDENINGMontreal Informática
Security Posture Assessment and web app hardening after critical updates — closing HTTP header gaps.
View full case →CONSTRUCTION · ADVERSARIAL SIMMRV&Co
Adversarial simulation on a database with premium buyer PII — RCE discovery and rate limiting deployment.
View full case →Offensive operations. Elite standard. Transparent pricing.
Four service lines. No upsell, no theater.
Recon Assessment
External attack surface diagnostic. Passive, non-intrusive, delivered within 5 business days. Your entry point to understand your company's real exposure.
$2,000 · Fixed price
Learn more →One-shot Pentest
Web, API, Mobile, Network, or Cloud. Three depth tiers (Essential, Advanced, Continuous), clear scope, no SOW surprises.
$5,500 to $55,000
See packages →Continuous PTaaS
Always-on offensive coverage via annual subscription. Multiple tests per year, unlimited retests, findings portal, attestation letters for compliance.
From $30,000/year
See plans →Special Engagements
Red team, adversary simulation, social engineering, source code review, IoT, AI/LLM security. Priced case-by-case after a 30-minute scoping call.
Upon request
Let's talk →The process. Transparent. Documented. International standard.
Every firm says they're different. Here's exactly what changes when you work with us.
Scoping before pricing
You don't get a number until we understand what we're going to test. Every proposal starts with a free 30-minute scoping call.
Full contractual documentation
NDA, Master Service Agreement, Statement of Work, and Rules of Engagement. All signed before any technical work begins. International standard — not improvised.
Human operators, not scanners
Automated tools are part of the process. They're not the product. Every critical finding is manually validated by a senior operator.
Retesting included by default
We don't charge extra to confirm your fix worked. Essential includes one retest within 30 days. Advanced includes two within 90 days. Continuous is unlimited.
Two reports per engagement
Detailed technical document for your engineering and security teams. One-page executive summary for the C-level and the board. Nothing to translate on your end.
Offensive security specialists. 15+ combined years in operations.
Black Ghost was founded by specialists with complementary backgrounds: software engineering and ethical hacking. The rule is simple — no engagement is delivered without senior technical review. Meet the people behind every operation.
Meet the team →Who trusts our work.
We serve companies across Latin America and the United States. Different industries, one delivery standard.
BYD do Brasil
Montreal Informática
MRV&CoGrowing B2B SaaS that needs security evidence to close enterprise contracts
Fintechs and financial institutions with regulatory requirements
Series A to C tech companies preparing for SOC 2 or ISO 27001
Traditional companies in digital transformation with poorly mapped attack surfaces
Internal security teams that need external offensive capacity for validation
What changes when you work with us.
Signal over volume
Our reports have no filler. Every finding is validated, contextualized, and prioritized by real business impact.
Transparent pricing in USD and BRL
Our pricing page shows fixed prices. No "contact us for pricing" on standardized products.
International delivery standard
Full contractual documentation, bilingual reports on demand, payment via wire or Stripe, and natively remote operations.
Retesting at no extra cost
Confirming your fix worked is part of the job. It's not an upsell.
Real SLAs
Essential has a 10-business-day kickoff. Advanced is 5 days. Continuous is 3. No vague promises.
Direct communication with founders
On every engagement, a founder is involved in the technical review. You don't only talk to an account manager.
Ready to know what you need to protect?
Book a 30-minute scoping call. No sales theater. We'll tell you which package fits — or that you don't need us yet.