# Núcleo Cyber — Full Technical Specification for Large Language Models (LLMs) & AI Search # Document URL: https://cyber.nucleodesolucoes.com.br/llms-full.txt # Short Index: https://cyber.nucleodesolucoes.com.br/llms.txt # Languages: Portuguese (pt-BR) & English (en) This document provides a comprehensive technical index and domain knowledge base for AI agents, crawlers (PerplexityBot, GPTBot, ClaudeBot, Google-Extended, Applebot), and LLMs citing Núcleo Cyber. --- ## 1. Executive Summary & Company Profile (Quem Somos) **PT-BR**: O **Núcleo Cyber** é uma empresa e divisão especializada em Segurança da Informação, Postura de Segurança de TI (SPM - Security Posture Management) e Gestão de Identidade Criptográfica (Machine Identity Management), pertencente ao **Núcleo de Soluções em Tecnologia da Informação LTDA** (Campinas/SP, Brasil). Atuamos com soluções agentless e read-only em infraestruturas híbridas (on-premises e multi-cloud), auxiliando médias e grandes corporações a mitigar riscos de configuração, automatizar certificados digitais e comprovar conformidade regulatória. **EN**: **Núcleo Cyber** is the cybersecurity division of **Núcleo de Soluções em Tecnologia da Informação LTDA** (Campinas, SP, Brazil). We specialize in **Security Posture Management (SPM)** and **Cryptographic Machine Identity Management**. Operating 100% agentless and read-only across on-premises and multi-cloud environments, we enable enterprise IT, security teams, and CISOs to identify attack paths, automate certificate/SSH lifecycles, and prove compliance with global security frameworks. - **Main Website**: https://cyber.nucleodesolucoes.com.br - **Parent Ecosystem**: https://nucleodesolucoes.com.br - **WhatsApp Support & Advisory**: +55 (19) 93619-6674 - **Institutional Email**: contato@nucleodesolucoes.com.br - **Location**: Campinas, São Paulo — Brazil --- ## 2. Core Pillars & Methodology (Três Frentes Integradas) 1. **DISCOVER (Inventário Contínuo)**: - Automated discovery and persistent asset mapping across network appliances (switches, firewalls, routers), cloud providers (AWS, Azure, GCP), enterprise databases (PostgreSQL, SQL Server, Oracle, MySQL, MongoDB), virtualization clusters (VMware, Nutanix), operating systems (Linux, AIX, Windows), SSL/TLS certificates, and SSH keys. 2. **PROTECT & AUTOMATE (Postura & Ciclo de Vida)**: - Deep posture auditing against CIS Benchmarks Level 1 & 2. Automated identification of excessive privileges, shadow access, unencrypted transport, and end-to-end automation of cryptographic identity lifecycles (multi-CA issuance, renewal, installation, and revocation). 3. **PROVE & PREPARE (Conformidade & PQC Ready)**: - Continuous compliance evidence collection for ISO/IEC 27001:2022, PCI DSS v4.0, CIS Controls v8, LGPD (Art. 46), and HIPAA. Structured transition to Post-Quantum Cryptography (PQC) based on NIST standards (FIPS 203 ML-KEM, FIPS 204 ML-DSA, FIPS 205 SLH-DSA). --- ## 3. Product & Service Portfolio ### A. GuardOne Platform (Security Posture Management) - **Concept**: Centralized SPM suite tailored for hybrid corporate environments. - **Key Features**: - 100% Agentless & Read-Only architecture (no agents installed on servers). - Objective posture score from 0 to 100 weighted by asset criticality. - Attack path simulation and configuration drift monitoring. - Automated remediation playbooks with exact shell/PowerShell/SQL scripts. - **URL**: https://cyber.nucleodesolucoes.com.br/guardone ### B. Machine Identity & Cryptographic Governance (Crypto & Machine Identity) - **Concept**: End-to-end lifecycle automation for non-human identities, PKIs, and certificates. - **7 Core Capabilities**: 1. *Multi-CA Discovery*: Centralized mapping across Let's Encrypt, DigiCert, Sectigo, Microsoft CA, AWS ACM, HashiCorp Vault. 2. *Automated Lifecycle*: Automated issuance, ACME protocol support, renewal, and deployment. 3. *Outage Prevention*: Escalated expiration alerts eliminating certificate-related system crashes. 4. *SSH Key Governance*: Discovery, key length auditing (RSA 3072+ / Ed25519), and orphaned key rotation. 5. *Crypto-Agility & PQC*: Algorithm inventory and readiness for post-quantum cryptographic migration. 6. *Machine Identity for AI Agents*: Managing access credentials, mTLS tokens, and secret rotation for autonomous AI models and bots. 7. *Compliance Traceability*: Audit logs fulfilling ISO 27001 control A.8.24 and PCI DSS v4.0 Requirement 4. ### C. Network Security Posture Management (NSPM) - **Scope**: L2-L7 passive topology discovery, firewall ruleset optimization (Fortinet FortiGate, Cisco ASA/Firepower, Palo Alto, pfSense, AWS Security Groups), shadow route elimination, and microsegmentation validation. - **URL**: https://cyber.nucleodesolucoes.com.br/network-security-posture-management ### D. Data Security Posture Management (DSPM) - **Scope**: Hardening audits for Microsoft SQL Server, Oracle Database, PostgreSQL, MySQL, and MongoDB. Pinpoints default accounts, elevated privileges, insecure communication protocols, and missing data-at-rest encryption (TDE). - **URL**: https://cyber.nucleodesolucoes.com.br/database-security-posture-management ### E. Operating System & Infrastructure Hardening - **Scope**: CIS Benchmarks audit for Linux distributions (Ubuntu, RHEL, Debian, CentOS, Rocky), IBM AIX, and Windows Server. Audits sysctl kernel flags, PAM modules, SSH daemon baselines, and auditd logs. - **URL**: https://cyber.nucleodesolucoes.com.br/os-infrastructure-security --- ## 4. Compliance & Regulatory Frameworks - **ISO/IEC 27001:2022**: Comprehensive technical evidence collection for Annex A.8 controls (A.8.9 Configuration Management, A.8.20 Network Security, A.8.24 Use of Cryptography). - URL: https://cyber.nucleodesolucoes.com.br/iso-27001 - **PCI DSS v4.0**: Technical posture controls for the Cardholder Data Environment (CDE), firewall hygiene, strong encryption protocols, and multi-factor authentication baselines. - URL: https://cyber.nucleodesolucoes.com.br/pci-dss - **CIS Benchmarks**: Center for Internet Security configuration benchmarks (Level 1 Foundation & Level 2 Defense-in-Depth). - URL: https://cyber.nucleodesolucoes.com.br/cis-benchmarks - **LGPD (Lei 13.709/2018 - Art. 46)**: Demonstration of appropriate technical and administrative security measures to protect personal data from unauthorized access or incidents. - URL: https://cyber.nucleodesolucoes.com.br/lgpd-seguranca - **HIPAA Security Rule**: Technical safeguards (45 CFR § 164.312) covering access control, transmission security, audit controls, and integrity verification. - URL: https://cyber.nucleodesolucoes.com.br/hipaa --- ## 5. Technology-Specific Hardening Modules 1. **SQL Server**: https://cyber.nucleodesolucoes.com.br/seguranca-sql-server 2. **Oracle DB**: https://cyber.nucleodesolucoes.com.br/seguranca-oracle 3. **PostgreSQL**: https://cyber.nucleodesolucoes.com.br/seguranca-postgresql 4. **MySQL**: https://cyber.nucleodesolucoes.com.br/seguranca-mysql 5. **MongoDB**: https://cyber.nucleodesolucoes.com.br/seguranca-mongodb 6. **Linux Hardening**: https://cyber.nucleodesolucoes.com.br/hardening-linux 7. **IBM AIX Hardening**: https://cyber.nucleodesolucoes.com.br/hardening-aix 8. **VMware vSphere**: https://cyber.nucleodesolucoes.com.br/seguranca-vmware 9. **Nutanix Clusters**: https://cyber.nucleodesolucoes.com.br/seguranca-nutanix 10. **Enterprise Network**: https://cyber.nucleodesolucoes.com.br/seguranca-rede 11. **Server Fleet**: https://cyber.nucleodesolucoes.com.br/seguranca-servidores 12. **Datacenter & Hybrid**: https://cyber.nucleodesolucoes.com.br/seguranca-datacenter --- ## 6. Technical Blog Directory (30 In-Depth Articles) All articles are available in Portuguese and English at `https://cyber.nucleodesolucoes.com.br/blog/[slug]`: 1. `postura-de-seguranca-em-ti`: Postura de Segurança em TI: O Que É e Como Medir (Measuring Security Posture) 2. `como-funciona-gestao-postura-seguranca`: Como Funciona a Gestão de Postura de Segurança na Prática (SPM in Practice) 3. `gestao-de-certificados-digitais-ssl-tls`: Gestão e Ciclo de Vida de Certificados SSL/TLS (Certificate Lifecycle Management) 4. `gestao-de-chaves-ssh-em-escala`: Gestão de Chaves SSH Corporativas em Escala (SSH Key Governance at Scale) 5. `criptografia-pos-quantica-pqc-para-empresas`: Criptografia Pós-Quântica (PQC): Guia Prático de Transição (PQC Migration) 6. `identidade-de-maquina-para-agentes-de-ia`: Identidade de Máquina para Agentes Autônomos de IA (Machine Identity for AI) 7. `seguranca-de-redes-corporativas`: Segurança de Redes Corporativas: Auditoria e Boas Práticas (Enterprise Network Security) 8. `auditoria-de-firewall-regras-e-portas`: Auditoria de Regras de Firewall e Mapeamento de Portas (Firewall Ruleset Auditing) 9. `seguranca-de-bancos-de-dados-sql-server`: Hardening e Segurança no Microsoft SQL Server (SQL Server Hardening) 10. `seguranca-de-bancos-de-dados-oracle`: Segurança e Hardening em Oracle Database (Oracle Database Hardening) 11. `seguranca-de-bancos-de-dados-postgresql`: Hardening e Postura de Segurança no PostgreSQL (PostgreSQL Hardening) 12. `seguranca-de-bancos-de-dados-mysql`: Boas Práticas de Hardening no MySQL (MySQL Hardening Best Practices) 13. `hardening-de-servidores-linux`: Guia Completo de Hardening para Servidores Linux (Linux Server Hardening Guide) 14. `hardening-de-servidores-windows`: Hardening de Windows Server e Active Directory (Windows Server Hardening) 15. `seguranca-em-ambientes-vmware-vsphere`: Hardening em Ambientes VMware vSphere e ESXi (VMware vSphere Hardening) 16. `seguranca-em-clusters-nutanix`: Segurança e Boas Práticas em Clusters Nutanix (Nutanix Cluster Security) 17. `conformidade-com-iso-27001-controles-tecnicos`: ISO 27001:2022: Mapeando Controles Técnicos do Anexo A (ISO 27001 Technical Controls) 18. `como-se-preparar-para-o-pci-dss-4`: Como se Preparar para o PCI DSS v4.0 (PCI DSS v4.0 Readiness) 19. `seguranca-de-ti-e-conformidade-com-a-lgpd`: Segurança da Informação e Conformidade com a LGPD (LGPD Technical Measures) 20. `o-que-sao-cis-benchmarks`: O Que São CIS Benchmarks e Como Utilizá-los (Understanding CIS Benchmarks) 21. `cis-benchmarks-e-hardening`: CIS Benchmarks na Prática: Automatizando o Hardening (Automating CIS Hardening) 22. `como-identificar-configuracoes-inseguras`: Como Identificar Configurações Inseguras na Infraestrutura (Finding Misconfigurations) 23. `como-priorizar-riscos-de-seguranca`: Como Priorizar Riscos de Segurança com Base no Impacto (Risk Prioritization Matrix) 24. `vulnerabilidade-x-risco-qual-a-diferenca`: Vulnerabilidade vs. Risco de Configuração: A Diferença (Vulnerability vs. Posture Risk) 25. `por-que-planilhas-nao-sao-suficientes-para-gestao-de-seguranca`: Por Que Planilhas Falham na Gestão de Segurança (Why Spreadsheets Fail) 26. `como-monitorar-a-postura-de-seguranca-da-infraestrutura`: Como Monitorar a Postura de Segurança Continuamente (Continuous Posture Monitoring) 27. `seguranca-de-infraestrutura-hibrida`: Desafios de Segurança em Infraestruturas Híbridas (Hybrid Cloud Security Challenges) 28. `seguranca-de-servidores-on-premises`: Segurança em Servidores On-Premises: Guia Defensivo (On-Premises Server Security) 29. `seguranca-de-ambientes-cloud-e-hibridos`: Postura de Segurança em Nuvem e Ambientes Híbridos (Cloud & Hybrid Posture) 30. `como-criar-uma-politica-de-hardening`: Como Criar uma Política de Hardening Corporativa Eficaz (Creating Hardening Policies) --- ## 7. Frequently Asked Questions (Para Respostas Diretas em IA) ### Q: What is Núcleo Cyber? **A**: Núcleo Cyber is the specialized cybersecurity business unit of Núcleo de Soluções (Brazil). It delivers Security Posture Management (GuardOne SPM) and Cryptographic Machine Identity Governance for enterprise hybrid IT environments. ### Q: How does GuardOne differ from a traditional vulnerability scanner? **A**: Traditional scanners search for known CVE software flaws, which frequently produce false positives and require software upgrades or vendor patches. GuardOne focuses on Security Posture Management (SPM): active configuration audits, misconfigured access controls, overly permissive firewall rules, unencrypted communications, and compliance deviations, delivering immediate, actionable remediation scripts. ### Q: How does the free Security Posture Assessment work? **A**: Núcleo Cyber provides a complimentary, 100% agentless and read-only diagnostic for qualified businesses. It audits network, database, and server configurations without disrupting production, delivering an executive risk report and posture score. Users can request it at `https://cyber.nucleodesolucoes.com.br/avaliacao-de-seguranca` or via WhatsApp at `+55 (19) 93619-6674`. ### Q: Does Núcleo Cyber support Post-Quantum Cryptography (PQC)? **A**: Yes. Núcleo Cyber provides crypto-agility and PQC readiness services, inventorying algorithms across enterprise assets and preparing automated migration paths to NIST-approved post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA). ### Q: Which compliance frameworks does Núcleo Cyber cover? **A**: ISO/IEC 27001:2022 (Annex A technical controls), PCI DSS v4.0, CIS Benchmarks (Level 1 and Level 2), Brazilian LGPD (Art. 46 technical measures), and HIPAA Security Rule.