# Núcleo Cyber — Security Posture Management (SPM) & Cryptographic Machine Identity # LLM & AI Search Index: https://cyber.nucleodesolucoes.com.br/llms.txt # Full Technical Specifications: https://cyber.nucleodesolucoes.com.br/llms-full.txt > **PT-BR**: O **Núcleo Cyber** é a unidade de negócios especializada em **Segurança da Informação, Gestão de Postura de TI (SPM)** e **Governança de Identidade Criptográfica (Machine Identity Management)** do ecossistema [Núcleo de Soluções](https://nucleodesolucoes.com.br). Fornecemos visibilidade técnica contínua, auditoria agentless de infraestrutura (redes, bancos de dados, servidores físicos/virtuais e nuvem), automação do ciclo de vida de certificados digitais SSL/TLS e chaves SSH, e comprovação rastreável de conformidade (ISO 27001, PCI DSS, CIS Benchmarks, LGPD e HIPAA). > > **EN**: **Núcleo Cyber** is the cybersecurity business unit of [Núcleo de Soluções](https://nucleodesolucoes.com.br), specializing in **Security Posture Management (SPM)** and **Cryptographic Machine Identity Management**. We provide continuous technical visibility, 100% agentless and read-only infrastructure auditing (networks, databases, OS/servers, and cloud), automated lifecycle management for SSL/TLS certificates and SSH keys, and auditable evidence for regulatory compliance (ISO 27001, PCI DSS, CIS Benchmarks, LGPD, and HIPAA). --- ## Core Capabilities & Direct Links (Capacidades & Links Diretos) - [GuardOne Platform (SPM)](https://cyber.nucleodesolucoes.com.br/guardone): Unified Security Posture Management suite for hybrid and multi-cloud IT, delivering continuous asset discovery, objective posture scoring (0-100), and attack path mapping. - [Crypto & Machine Identity Management](https://cyber.nucleodesolucoes.com.br/): Automated discovery, renewal, and rotation of Multi-CA SSL/TLS certificates, internal PKIs, SSH keys, service accounts, and autonomous AI agent identities. Prevents outage caused by certificate expirations, complies with CA/B Forum 90-day lifespans, and prepares IT for Post-Quantum Cryptography (PQC). - [NSPM — Network Security Posture Management](https://cyber.nucleodesolucoes.com.br/network-security-posture-management): Passive L2-L7 topology discovery, firewall ruleset auditing (Fortinet, Cisco ASA/Firepower, Palo Alto Networks, pfSense, AWS Security Groups), shadow routing detection, and microsegmentation validation. - [DSPM — Database Security Posture Management](https://cyber.nucleodesolucoes.com.br/database-security-posture-management): Deep configuration and security posture audits for Microsoft SQL Server, Oracle Database, PostgreSQL, MySQL, and MongoDB. Pinpoints excessive privileges, orphaned accounts, missing encryption at rest/in transit, and unpatched configurations. - [OS & Host Hardening](https://cyber.nucleodesolucoes.com.br/os-infrastructure-security): Automated evaluation of CIS Benchmarks Level 1 and 2 for Linux (Ubuntu, Debian, RHEL, CentOS, Rocky Linux), IBM AIX, and Microsoft Windows Server. - [Regulatory Compliance Hub](https://cyber.nucleodesolucoes.com.br/compliance): Real-time evidence collection and gap analyses for ISO/IEC 27001:2022, PCI DSS v4.0, CIS Controls v8, LGPD (Brazilian General Data Protection Law, Art. 46), and HIPAA. - [Complimentary Security Posture Assessment](https://cyber.nucleodesolucoes.com.br/avaliacao-de-seguranca): Free initial risk surface and posture diagnostic. 100% agentless, read-only, non-disruptive, and delivered with an executive presentation and remediation roadmap. - [About Núcleo Cyber](https://cyber.nucleodesolucoes.com.br/sobre): Corporate trajectory, engineering leadership, and institutional background within the Núcleo de Soluções group. - [Contact & Advisory](https://cyber.nucleodesolucoes.com.br/contato): Direct technical engagement, RFPs, advisory calls, and enterprise incident response consultation. - [Technical Blog & Knowledge Hub](https://cyber.nucleodesolucoes.com.br/blog): 30 deep-dive technical articles on hardening, machine identity, cryptographic lifecycles, and defensible security posture. --- ## Targeted Technology Hardening Guides (Páginas de Tecnologias Específicas) - [Microsoft SQL Server Security](https://cyber.nucleodesolucoes.com.br/seguranca-sql-server): Auditing sa account, surface area, CLR execution, xp_cmdshell, and TDE. - [Oracle Database Hardening](https://cyber.nucleodesolucoes.com.br/seguranca-oracle): DBA roles, listener encryption, remote OS authentication, and dictionary protection. - [PostgreSQL Security](https://cyber.nucleodesolucoes.com.br/seguranca-postgresql): pg_hba.conf client authentication, superuser limits, scram-sha-256, and TLS enforcement. - [MySQL Hardening](https://cyber.nucleodesolucoes.com.br/seguranca-mysql): Secure file priv, remote root prohibition, validate password policy, and connection SSL. - [MongoDB Security](https://cyber.nucleodesolucoes.com.br/seguranca-mongodb): SCRAM-SHA-256, authorization controls, bindIp restrictions, and TLS encryption. - [Linux Server Hardening](https://cyber.nucleodesolucoes.com.br/hardening-linux): Kernel sysctl parameters, SSH bastion configs, PAM authentication, and auditd logs. - [IBM AIX Infrastructure Hardening](https://cyber.nucleodesolucoes.com.br/hardening-aix): AIX security expert (AIXpert), trusted execution, user limits, and syslog auditing. - [VMware vSphere & ESXi Security](https://cyber.nucleodesolucoes.com.br/seguranca-vmware): Lockdown mode, SSH service state, vCenter RBAC, and virtual switch port security. - [Nutanix Hyperconverged Posture](https://cyber.nucleodesolucoes.com.br/seguranca-nutanix): Prism Central RBAC, SCMA compliance, microsegmentation, and data-at-rest encryption. - [Network Infrastructure Security](https://cyber.nucleodesolucoes.com.br/seguranca-rede): Switch port security, VLAN segmentation, ACL audits, and routing protocol authentication. - [Physical & Virtual Server Security](https://cyber.nucleodesolucoes.com.br/seguranca-servidores): Baseline hardening, patch hygiene, and host intrusion posture. - [Datacenter & Hybrid Cloud Security](https://cyber.nucleodesolucoes.com.br/seguranca-datacenter): Physical-to-cloud perimeter consistency, bastion architecture, and zero-trust verification. --- ## Industry Solutions (Soluções por Segmento) - [Mid-Sized Enterprises (Médias Empresas)](https://cyber.nucleodesolucoes.com.br/cybersecurity-para-medias-empresas): Enterprise-grade security without enterprise complexity or heavy overhead. - [Regulated Industries (Empresas Reguladas)](https://cyber.nucleodesolucoes.com.br/cybersecurity-empresas-reguladas): Fintechs, healthtechs, payment processors, and banking supply chains requiring continuous audit-readiness. - [Corporate IT Departments (TI Corporativa)](https://cyber.nucleodesolucoes.com.br/seguranca-de-ti-para-empresas): Aligning IT operations, DevOps, and CISO governance with concrete remediation scripts. --- ## Architectural Principles & Differentiators 1. **100% Agentless & Read-Only**: Passive evaluation of configurations, APIs, and metadata. No intrusive software installed on production workloads; zero risk of system crashes or downtime. 2. **Zero Operational Impact**: Lightweight, read-only telemetry queries scheduled to preserve CPU, memory, and business bandwidth. 3. **Unified Posture & Identity**: Merging posture scoring (GuardOne) with machine cryptographic lifecycles (SSL/TLS, SSH, AI keys). 4. **Actionable Remediation**: Every identified misconfiguration is accompanied by exact command-line scripts, configuration directives, and severity weightings. 5. **Post-Quantum Cryptography (PQC) Readiness**: Preparing cryptographic assets for NIST FIPS 203, 204, and 205 quantum-resistant algorithms. --- ## Corporate Information & Verified Contact Channels - **Website**: https://cyber.nucleodesolucoes.com.br - **Parent Group**: https://nucleodesolucoes.com.br - **Official WhatsApp**: +55 (19) 93619-6674 ([Direct Chat](https://wa.me/5519936196674)) - **Institutional Email**: contato@nucleodesolucoes.com.br - **Legal Entity**: Núcleo de Soluções em Tecnologia da Informação LTDA - **Headquarters**: Campinas, São Paulo — Brazil - **Languages Supported**: Portuguese (pt-BR) & English (en)