Expert-level Fortinet partner whose own history dates it to 2001, when it began with information-security consulting for Brazilian companies that had no access control policy at all.
The company's account of its start is the useful part, because it dates the market rather than the firm. In 2001 digital security was barely discussed in Brazil, and its first work was consulting for organisations that lacked basic access-control policies. A security practice founded in that year did not begin by selling products; it began by explaining that the problem existed.
Twenty-five years later the same company sits at Expert level in a vendor programme whose tiers are earned with certified engineers. That is the arc of the Brazilian security channel in one entry: from arguing the case, to being graded on how many people you have who can implement it.
Under Protection was founded in 2001, and its own account of why is worth taking at face value: it began doing information-security consulting for Brazilian companies that had no access-control policies at all. That is early. Brazil's general data protection law was still nineteen years away, and most of the compliance pressure that now sustains this kind of consultancy did not exist - so the first customers were buying a judgement about risk rather than a way to satisfy a regulator.
The work described from the start is risk assessment, compliance and incident prevention against international frameworks - ISO 27001 and 27701, and NIST - rather than product resale, and the company now holds ISO 9001 and 27001 itself. Its stated conclusion after two decades is that the serious failures came less from badly configured tools than from the absence of strategy and process around them.