ronutz
← Alle leverandører

Vendor lineage

Compugraf (now CG One)

A computer graphics company that became a security company, and kept the name for forty years.

The name is the story. Compugraf was registered in São Paulo in April 1982, and it did what it said: computação gráfica, computer graphics. Somewhere in the 1990s it moved into information security, and then stayed there for three decades under a name that had stopped describing it.

That is a more common pattern in this industry than the tidy histories suggest, and this timeline has several instances of it. Companies rarely rename themselves when their business changes, because the name is the thing customers already trust - so the trading name becomes a fossil of what the company used to do. Anyone meeting Compugraf as a security integrator in 2010 had no particular reason to know it had once sold graphics systems.

The security business settled into the shape most Brazilian integrators of its generation took: network and information security for large domestic customers across industry, financial services and energy, sold and supported locally rather than through a multinational's channel. The company describes itself as one hundred per cent Brazilian, with over 150 staff and more than five hundred client companies served across two decades.

In 2024 it finally renamed, to CG One - which keeps the initials of the graphics business while abandoning the word. Forty-two years is a long time to carry a name you have outgrown, and shortening it to two letters is the usual compromise between continuity and accuracy.

The timeline

  1. A group, not a company

    The original registration dates from April, and several further legal entities followed - a telecommunications arm in 1998, a digital security company in 2010, an information security company in 2021. That structure is ordinary in Brazil and worth understanding: a customer contracting with one of these names is contracting with one company inside a group, not with the forty-year-old business the brand refers to.

Flagship products and solutions

  • Perimeter and network securityFirewall, segmentation and access control, built on Check Point and Forescout - the traditional core of an integrator's practice, and the part with the longest customer relationships.
  • Application delivery and securityF5, for load balancing and application-layer protection. This is the practice that requires the most specialist knowledge to sell and the most to support, which is why relatively few integrators carry it well.
  • Policy and change managementAlgoSec, for managing firewall rule sets across an estate. A product that exists because large organisations accumulate thousands of rules nobody remembers the reason for - which is the actual condition of most networks.
  • Privacy and governanceOneTrust, for data protection compliance. The addition that dates the portfolio: Brazil's general data protection law made privacy a purchasing decision rather than a legal opinion, and integrators added practices accordingly.

Key innovations

  • The partner list is the strategyAn integrator has no products of its own, so its vendor roster is the most honest description of what it does. This one reads as perimeter, application delivery and compliance rather than endpoint, detection or cloud-native - a practice built around protecting the boundary and the application, for organisations with substantial estates and regulators to answer to. Reading a partner list this way tells you more than any positioning statement.
  • Staying local when the multinationals arrivedThe Brazilian market has been served since the 1990s by global integrators and by the vendors' own channels. A firm of this size remaining independent and describing itself as wholly Brazilian is a position rather than an accident - the argument being that a customer wanting somebody who answers the telephone in the same time zone, under the same contract law, will pay for it.

Main markets

Large Brazilian organisations in industry, financial services and energy, reported at more than three hundred active clients and over five hundred served across two decades, with around 150 staff.

It competes with the global integrators operating in Brazil, with the distributors' own service arms, and with the vendors selling direct - the last being the standing risk in this business, since every partner is also a potential competitor.

Analyst standing

  • No analyst coverage exists for a private firm of this size, and no financial statements are public. What can be verified is longevity, an ISO 9001 certification, and a vendor roster that requires the certifications those vendors demand.
  • The observation worth recording is about the category rather than the company. A forty-year-old independent integrator is an increasingly unusual object: the economics push toward consolidation into the distributors and the global services firms, and this timeline records several that took that route. Remaining independent at this scale means either a defensible specialism or an owner who does not want to sell, and from outside the two look identical.
CG One ↗
Sources