ABOUT BLACK GHOST · AUTONOMOUS CYBER DEFENSE
Autonomous security infrastructure, built from Brazil.
Black Ghost is building a new defense layer: autonomous agents that understand and respond to threats at machine speed. We were born in Brazil, where technological independence is strategic — but the market is global.
01THE PROBLEM
Defense stood still while the attack evolved.
AI is changing the economics and speed of cyberattacks. Reconnaissance, attack-surface discovery, exploitation, social engineering and evasion are being automated. Attacks have become faster, more adaptive and more autonomous.
Traditional defense, however, still relies on static rules, signatures, fixed playbooks, alerts and human intervention. The asymmetry between adaptive attacks and static defenses is the core problem we attack. If attacks became autonomous, defense has to become autonomous too.
01
Machine-speed attacks
AI lets attackers automate reconnaissance, exploitation and evasion. Human teams cannot keep up with manual processes alone.
02
Static defenses
Rules, signatures and pre-written playbooks do not cover campaigns that change with every run.
03
Disconnected tools
Dozens of products that only detect and alert push decision and response onto an analyst who is always one step behind.
04
Critical infrastructure
Energy, telecommunications, healthcare and transport run systems whose unavailability has immediate physical, economic and social consequences.
05
Strategic dependence
Critical defense cannot depend solely on the availability, jurisdiction or commercial policy of third parties to keep working.
02OUR ORIGIN
We started where the attacks start.
Black Ghost was born in offensive security. Before defending, we spent years understanding how attackers find and exploit real flaws: how a forgotten endpoint becomes an entry point, how a weak credential becomes lateral movement, how one configuration detail becomes full compromise.
Understanding how to attack was the first step to understanding how to build a better defense. That is not a tagline — it is why every architectural decision in our technology starts with the question "how would I break this?".
It is also what separates us from those who build security from a requirements document. We find the problems first. Then we build the answer.
03OUR EVOLUTION
From offensive security to security technology.
Each stage feeds the next. We skip none of them.
04HOW WE BUILD
Operations, research, technology and capability building.
01
Operations
We work directly to protect companies, applications, networks, clouds and critical infrastructure through offensive and defensive services. It is what keeps us in contact with the real problem.
02
Research & development
We turn real operational challenges into applied research, automation and proprietary tooling. What hurts in the operation becomes an engineering priority.
03
Proprietary technology
We are building Argos: an AI-native autonomous agent, with our own components for telemetry collection, analysis at the edge, detection and response — cross-platform, for Windows, Linux and macOS.
04
Capability building
We develop knowledge, processes and professionals capable of operating and evolving critical security technologies. Technology without people who master it does not create autonomy.
05WHERE WE WANT TO OPERATE
Protection for environments where security and control are critical.
01
Government & defense
Protection of public data, strategic systems and essential services under high requirements for secrecy, jurisdiction and continuity.
02
Critical infrastructure
Defense of energy, telecommunications, industry, transport, healthcare and other environments whose unavailability produces real consequences.
03
Regulated & strategic companies
Finance, healthcare and organizations responsible for large volumes of data and critical operations that need to reduce dependencies and improve their response capability.
04
Technology & SaaS
Offensive and defensive security integrated into companies building the next generation of digital services — in Brazil and abroad.
06WHAT DRIVES US
Autonomy as a principle. And what we won't compromise on.
01
Customer control
The ability to protect strategic data and systems cannot depend solely on the decisions, jurisdictions and commercial priorities of third parties. The customer keeps control over their data, keys, policies and response. Sovereignty is a consequence of that architecture.
02
Offensive knowledge in service of defense
We know both sides. We use the same logic an attacker uses to find flaws, but with a single goal: turning that knowledge into real prevention, detection and response.
03
Continuity over convenience
Critical defense must keep working even amid external restrictions, vendor unavailability or geopolitical change. We design for continuity, not dependence.
04
Absolute ethics, legality and confidentiality
We always operate within the law, with documented authorization and an NDA before any work begins. Full technical transparency with those who trust us; absolute discretion about what we find.
07THE TEAM
The specialists behind every operation.
Black Ghost was founded by specialists with complementary expertise in software engineering, offensive security, and artificial intelligence. We combine engineering, research, and security operations to build defensive technology capable of confronting real-world threats.
João Vitor
Co-founder · CEO · Software Engineer
Software engineer with experience developing systems used by Brazilian public institutions. At Black Ghost, he leads company strategy and turns security problems into products and operations capable of protecting real-world environments. He is responsible for platform infrastructure, software architecture, and the technical direction of engagements.
- Strategy
- Software Engineering
- Infrastructure
Luís Felipe
Co-founder · CISO · Pentester & Security Researcher
Offensive security professional with experience discovering and exploiting vulnerabilities in major companies across the automotive and construction industries. He also served as technical lead of the Discord hacker team. At Black Ghost, he leads offensive security, reconnaissance, penetration testing, and security research, identifying real paths to compromise before adversaries can exploit them.
- Pentesting
- Red Team
- Security Research
Pablo
Co-founder · CTO · Software Engineer
Software engineer focused on architecture, distributed systems, and security infrastructure. At Black Ghost, he leads platform engineering, turning security requirements into robust, scalable systems designed to operate in critical environments.
- Architecture
- Software Engineering
- Distributed Systems
Guilherme
Co-founder · CAIO · Software Engineer
Software engineer and Master’s graduate in Artificial Intelligence, focused on applying AI to complex engineering and security problems. At Black Ghost, he leads AI research and development, building the intelligence behind the platform’s capabilities for threat detection, analysis, and autonomous response.
- Artificial Intelligence
- Machine Learning
- Software Engineering
08HOW WE OPERATE
The process. Transparent. Documented. No improvisation.
- 01
Scoping before pricing
No proposal is sent without a free 30-minute intro call. You don't get a number until we understand what we're going to test or defend.
- 02
Full contractual documentation
NDA, MSA, Statement of Work, and Rules of Engagement. All signed before any technical work begins. International standard.
- 03
Human operators in command
Automated tools are part of the process, but every critical finding is manually validated by a senior specialist.
- 04
Retesting included by default
Confirming your fix worked is part of the job, not an extra cost. The retest is part of the engagement.
- 05
Two reports per engagement
Detailed technical document for the engineering team and a one-page executive summary for the C-level. Nothing to translate on your end.
09OUR VISION
Autonomous defense, built from Brazil.
We are not seeking technological isolation. We are seeking autonomy: the ability to choose, integrate, replace and keep operating independently of external decisions.
The endpoint is the first battlefield. Starting from Argos, the vision is to build a layer of autonomous defense infrastructure able to protect different surfaces — endpoint, cloud, network and identity — with architecture, processing and continuity under the customer's control.
We are building, from Brazil, cyber-defense technology capable of protecting organizations anywhere in the world. Sovereignty is an architectural principle; the market is global.
Ready to strengthen your defense with us?
Talk to our specialists. No sales theater. We understand your context and show you how we can help today.