Security you can see and keep up
We map the risks, prioritize what matters and automate the monitoring of your environment with open-source software — tuned to your company’s size and profile.
Information security consulting
A clear action plan with a beginning, middle and end — not a report that sits in a drawer.
Maturity assessment
We evaluate your environment against ISO 27001/27002 and the CIS Controls and show where you are and where you need to be.
Risk analysis
We identify threats, vulnerabilities and business impact so you invest first in what reduces risk the most.
Policies and processes
Security policy, access control, backup, acceptable use and incident response, written for your reality.
Data protection compliance
Technical alignment with Brazil’s LGPD: mapping where personal data lives, access controls, activity logging and an incident plan.
Server and cloud hardening
Secure configurations for servers, workstations, Kubernetes and cloud accounts, following recognized benchmarks.
Vulnerability management
Regular scans, prioritization by real risk and follow-up on fixes until they are done.
Continuous monitoring with Wazuh, with no licensing cost
Wazuh is an open-source security platform used around the world. We deploy it, tune the rules to your environment and automate the responses — so your team can focus on what really needs people.
- All logs in one place. Servers, workstations, firewalls, cloud and containers sending events to a single dashboard.
- Threat detection. Intrusion attempts, malware and unusual behavior identified in real time.
- File integrity. Alerts when critical files and settings change.
- Inventory and vulnerabilities. Know what is installed on every machine and what needs updating.
- Compliance. Configuration checks and reports for LGPD, ISO 27001, PCI DSS and CIS.
- Automated response. Block an IP, isolate a machine and open a ticket without waiting for anyone.
Built for your company’s profile
No off-the-shelf tool knows your business. We build what’s missing so security fits your daily routine.
Dashboards for each audience
A technical view for the IT team and a straightforward one for management to follow the risk.
Integrations
Alerts by e-mail, Teams or Telegram, and tickets opened automatically in the system you already use.
Your business rules
Detections written for your internal systems, working hours and users — not just generic rules.
Link to risk management
Events and nonconformities sent to Iunca Norma, alongside risks, audits and corrective actions.
From assessment to operation
Assessment
Interviews, environment review and scans to understand risks and priorities.
Action plan
A prioritized list of actions, with the effort, cost and risk reduction of each one.
Rollout
Controls, policies, Wazuh and integrations put into production without stopping the operation.
Follow-up
Rule fine-tuning, regular reports and team training.
Let’s talk about your company’s security
Tell us the size of your environment and what worries you most today. We’ll reply with next steps and an assessment proposal.
- contato@iunca.com.br
- +55 (85) 0000-0000
- Location
- Fortaleza, Ceará, Brazil