The beginning
Three engineers, one bank
Nodo started as a testing team for a mid-sized payments company in São Paulo. The brief was narrow and the standard was high: find what the auditors missed, and prove it.
Who we are
Nodo began in 2014 with three engineers and a single contract. We have grown carefully, sector by sector, keeping the same standard: show our work, rank by consequence, answer by name.
The progression
A short history, told in the moments that changed what we do and how we do it.
The beginning
Nodo started as a testing team for a mid-sized payments company in São Paulo. The brief was narrow and the standard was high: find what the auditors missed, and prove it.
A monitoring centre
Clients kept asking what happened after the report. We opened a monitoring centre so the watching never stopped when the engagement ended.
The LGPD arrives
When the Lei Geral de Proteção de Dados took effect, we built a team to translate the law into controls engineers could ship — not a binder that sits on a shelf.
Today
Response teams in São Paulo and Rio de Janeiro, nine sectors served, and the same rule we started with: nothing in a report we cannot reproduce on demand.
We would rather deliver three findings you can act on this week than a hundred you will never read. Consequence is the only ranking that matters.
— Nodo, on how we write reports
The people leading the work
Every engagement has a lead. These are the people who carry that responsibility across our practice.
Head of offensive testing
Fifteen years breaking into systems so others cannot. Leads our assessment teams and writes the rules of engagement that keep testing safe.
Director, monitoring centre
Runs the floor that watches client systems around the clock. Built the alert-tuning method that keeps our analysts focused on real signals.
Lead, governance & LGPD
Bridges the law and the build. Translates obligations from the ANPD and Banco Central into controls your engineers can implement without guesswork.
Where we stand
Work with us