Brazilian cybersecurity company Vultus has raised R$ 8 million to accelerate its proprietary technology development and expand the role of software in its business. The company currently operates with 65 employees and 95 active projects, and it aims to double revenue within three years while reducing dependence on a consulting model based primarily on billable hours. The investment supports the continued rollout of Ares, an artificial intelligence platform that simulates attacks against client systems to identify vulnerabilities before malicious actors can exploit them.
Automating Offensive Security
Ares allows a client to register a system, validate domain ownership, and then let AI agents search for ways to enter that environment. The method is similar to a traditional penetration test, but it is performed with authorization and in a controlled setting. Vultus says a process that could take about 30 days can now be completed in six hours, with some complex cases lasting up to twelve hours.
From Technical Findings to Business Decisions
After a simulated attack, the platform produces a report with identified vulnerabilities, technical remediation details, and an analysis aimed at executives. The goal is not only to show that a code contains a flaw, but to explain the risk of leaving that vulnerability open and whether immediate investment in a fix is justified. Human specialists continue to monitor the process, and the system sends alerts when an AI action is considered critical.
Origins and Consolidation
Vultus emerged from GC Security, a provider of technical cybersecurity services, and from the governance-focused cybersecurity practice that later became Trust Cybersecurity within consultancy Falconi. The operations were combined under the Vultus brand in the second half of 2024. At launch, the company reported approximate revenue of R$ 35 million, more than 70 clients, and a plan to surpass R$ 100 million in revenue within four years.
Why Artificial Intelligence Changed the Strategy
Company leaders observed that artificial intelligence was not only transforming corporate defense; it was also enabling attackers to automate vulnerability discovery and exploitation. Chief Executive Officer Alexandre Brum has described this development as an existential challenge for traditional cybersecurity delivery. In response, the company began moving from a fully consulting-based model toward a combination of specialized services and scalable technology products, with Ares forming part of a broader Olympus platform.
Financial Case for Product Growth
In a traditional consulting business, winning more contracts generally requires hiring more professionals. By converting part of that work into software, Vultus expects to grow revenue without increasing costs at the same pace. Although there are additional expenses related to artificial intelligence models and token consumption, the company anticipates stronger margins as product revenue expands.
Allocation of the R$ 8 Million
The new funding will be directed mainly toward proprietary technology development and expansion of the software portfolio. The investment also accompanies a reorganization that includes changes to the company's ownership structure and its advisory and administrative boards. The objective is to package the expertise accumulated by Vultus specialists in simulated attacks, threat intelligence, and risk management into technology that can serve more clients without proportional headcount growth.
Client Base and Market Reach
Vultus does not disclose its full client list for confidentiality reasons, but public cases include Unidas, Arezzo, and MV. The financial, telecommunications, and services sectors represent important parts of its portfolio, alongside industry and logistics clients. The company states that the combined revenue of its client companies reaches around R$ 1 trillion, a figure used to illustrate the economic weight of its customer base.
Vultus is betting that cybersecurity must scale at the same pace as the threats it confronts. The R$ 8 million investment supports a structural shift from consulting hours toward software that can simulate attacks quickly and repeatedly. If the strategy succeeds, the company will be able to expand its client base, improve margins, and continue using consulting as both a market entry point and a source of technical knowledge.
Source: Exame