Oktsec brings together security research, open-source engineering and experience operating financial software. We build controls for the work enterprises delegate to AI agents.
AI agents are gaining the ability to write software, move money and operate business systems. Cybersecurity must govern the authority behind those actions. We’re building Oktsec as the security infrastructure that lets organizations delegate more of their work to AI.
We see agents becoming part of how hospitals deliver care, financial institutions serve customers and businesses run. Organizations should be able to expand what they delegate while keeping control over the systems, data and decisions that matter.
Turn the permissions people grant into controls that hold when agents act. Our mission is to carry that authority across tools, systems and other agents: define the limits, enforce them at execution and preserve evidence people can verify.
Gustavo is Oktsec’s full-time technical founder. His background combines product leadership, financial technology and security research.
Building Oktsec to help enterprises put AI agents to work safely. We test workflows for exploitable weaknesses, inspect software dependencies for supply-chain threats and enforce policy before routed actions reach a tool or system. Teams can restrict access to sensitive files, credentials and deployment tools, then use signed evidence of each evaluated action to investigate incidents and support audits.
As Chief Product and Technology Officer, led product and technology in regulated financial services.
Spent seven years building Brelo in São Paulo, Brazil, working with the team on patented device-locking technology for mobile collateral lending.
Agree the scope and permitted tests first. Your team reviews the findings and decides which controls to adopt.
Start with one workflow. Explicit rules of engagement. Findings with executable evidence.
Enforcement stays in environments you own. No inbound requirement to run Oktsec Control.
Prove the path without escalating beyond the agreed scope. Keep a full trail after the run.
Use forms to describe the workflow. Do not include secrets, credentials, customer data or source code.
Explore the research, customer example and open source projects behind oktsec.
Read the attack analysis, reproduction methods and sources in the research archive.
See how Certuma combines agent assistance, policy checks and physician review.
Explore Aguara for dependency inspection and nanostack for structured development. How the projects fit together.
