Skip to content
Indene
en

Real security within reach of every company

Your cybersecurity team. Without having to hire one.

Our own platform, services and AI specialists, coordinated by a manager who is accountable: Indene finds what exposes your company, fixes it with your IT, responds to what is serious and puts the risk in money terms for you to decide.

In about an hour, you know how your company looks to an attacker and what to do first.

Book the assessmentSee how it works
  • Every company isolated from day one
  • Credentials can stay on your network
  • Every action logged, with who approved it
  • Trust page

Too big to ignore the risk.Too small to build a team.Until now.

Trusted by

Connect everything
in one place.

70ready connectors

  • Microsoft Entra ID
  • Keycloak
  • VMware vSphere
  • Citrix Hypervisor
  • Microsoft Azure
  • Hetzner Cloud
  • Portainer
  • Cloudflare
  • Cisco Meraki
  • OPNsense
  • Tenable Nessus
  • SentinelOne Singularity
  • Splunk
  • ManageEngine Endpoint Central
  • Snipe-IT
  • Rubrik
  • Active Directory
  • JumpCloud
  • Segura
  • Microsoft Hyper-V
  • OpenShift Virtualization
  • AWS
  • Oracle Cloud
  • DigitalOcean
  • Kubernetes
  • GitHub
  • Palo Alto NGFW
  • Sophos Firewall
  • MikroTik RouterOS
  • Qualys CSAM
  • Qualys Policy Compliance
  • CrowdStrike Falcon
  • Sophos Intercept X
  • Microsoft Sentinel
  • Jamf Pro
  • Lansweeper
  • Proxmox Backup Server
  • Commvault
  • Acronis Cyber Protect
  • Google Workspace
  • Okta
  • CyberArk
  • Proxmox VE
  • Nutanix AHV
  • XCP-ng
  • oVirt
  • Google Cloud
  • Huawei Cloud
  • Magalu Cloud
  • Vultr
  • Coolify
  • GitLab
  • Fortinet FortiGate
  • Check Point
  • Ubiquiti UniFi
  • pfSense
  • Tailscale
  • Qualys VMDR
  • Wazuh
  • Microsoft Defender
  • Palo Alto Cortex XDR
  • Kaspersky Security Center
  • Microsoft Intune
  • Microsoft Configuration Manager
  • NinjaOne
  • GLPI
  • Veeam Backup & Replication
  • Veritas NetBackup
  • Cohesity DataProtect
  • Bareos

All of your company’s tools, in one place.

Whatever has no connector yet, Indene connects within 15 days.

connectors ready today
70
to connect what is missing
15 days
to the first reading
1 hour

You connect once, by credential and scope. Indene reads your whole environment, and every piece of data starts proving a control and feeding the loss scenarios in money terms.

How each connector works

  • No rollout project: in about an hour, everything already running in your company shows up on a single panel.
  • You see what nobody remembered: machines with no owner, forgotten accounts and access without a second factor.
  • Risk stops being an opinion: every reading becomes dated proof and goes into the loss calculation in money terms.

What comes in here becomes the team’s routine, in the next block

Connected to your tools, the AI team takes over the routine.

Routine 1

Watches, every day.

  • 1.1Inventory with an owner, per machine
  • 1.2Outside view from your domain
  • 1.3Vulnerabilities per asset
  • 1.4Accounts without a second factor or forgotten
  • 1.5Backup checked against the 3-2-1 rule
  • 1.6Alert monitoring with triage
Routine 2

Fixes, with your IT.

  • 2.1“Today” queue in risk order
  • 2.2Step by step for your IT
  • 2.3Check of what was done
  • 2.4Autonomy from 1 to 3, you choose
  • 2.5Record of who approved each action
Routine 3

Proves, when asked.

  • 3.1Evidence across ten standards
  • 3.2Customer questionnaire answered
  • 3.3Public trust page
  • 3.4Audit dossier with date and source
  • 3.5Pentest report in the same place
Routine 4

Reports back, in money terms.

  • 4.1Risk in money, range and confidence
  • 4.2How much the team has already reduced
  • 4.3Report for the board
  • 4.4Serious alert by email, with what to do
  • 4.5Incident record with legal deadlines
  • 4.6Monthly report of what the team did
All connectedAegis assigns, checks and records

What this routine is worth to you, in the next block

Eight services you would buy separately, in a single team.

  1. Included

    Assessment and Attack Surface (EASM)

    How your company looks to an attacker, in about an hour, with a PDF snapshot.

    In Indene: assessment and outside view
  2. Included

    Vulnerability Management (VM)

    The “Today” queue in risk order, the step by step for your IT and the check of what was done.

    In Indene: vulnerabilities per asset, with the fix ready
  3. Included

    Asset and Identity Management (ITAM and IAM)

    Every machine with an owner and protection; accounts without a second factor, privileged or forgotten, flagged.

    In Indene: inventory and accounts under control
  4. Included

    Backup and Continuity (BCDR)

    Copies, retention and isolation verified in the tool, with the failure flagged before the day you need to restore.

    In Indene: backup checked against the 3-2-1 rule
  5. Included

    Governance, Risk and Compliance (GRC)

    CMN 5.274 included. Every control with its proof, date and source, ready for audit.

    In Indene: ten standards with evidence, CMN 5.274 included
  6. Included

    Trust Center and Security Questionnaires

    The large customer’s questionnaire answered with the evidence behind it, and a public page to close the deal.

    In Indene: questionnaire answered and trust page
  7. Included

    Risk Quantification (CRQ) and vCISO

    How much the company can lose, as a range with the confidence alongside, and how much the team has already reduced.

    In Indene: risk in money and a report for the board
  8. Included

    Incident Response (IR)

    What is serious arrives by email with what to do now; the record organizes the timeline and the legal deadlines.

    In Indene: serious alert and incident record

8 services1 investment per month

A day with Indene.

Five minutes on the real product screen: what the AI team does from 4 a.m. to the leadership report, and what your IT team sees, module by module.

Film outline18 chapters in two parts. Click one to watch from there.

Part 1 · A day with Indene

The daily routine of your cybersecurity team, from the early hours to the board report.

Part 2 · Inside: what your IT team sees

Module by module, what the technical team follows in Indene.

A day with IndeneSee Indene at work.

Sample data

See the demo page

Run your numbersWhat it would cost to have each piece, bought separately, at the size of your company.

Enter your size and uncheck what your company already has. The amounts are approximate, taken from public market prices; the source for each one is under “sources”.

running it ≈ 4 h/monthsources
running it ≈ 12 h/month · Cloud CIEM left out of the sum (no public price)sources
running it ≈ 15 h/monthsources
running it ≈ 8 h/monthsources
running it ≈ 17 h/monthsources
running it ≈ 5 h/monthsources
sources
sources
running it ≈ 7 h/monthsources
running it ≈ 2 h/monthsources
sources
Buying each piece separately, per year≈ R$ 1.6M

likely range: from R$ 965k to R$ 2.5M per year

about R$ 135k per month · R$ 5.5k per employee per year

Approximate amountsThey come from list prices, real contracts and third-party estimates, with the dollar at R$ 5.04. Your quote will change with scope, negotiation and exchange rate. Check each source. See the sources
  • 10contracts
  • 6consoles
  • 15integrations

Where the money goes

  • Discover≈ R$ 230k14%
  • Fix≈ R$ 260k16%
  • Prove≈ R$ 510k31%
  • Decide≈ R$ 465k29%
  • Respond≈ R$ 165k10%

With Indene: 1 contract, 1 console, 70 ready-made connectors. All eight fronts in one monthly investment, and your team stays the same.

Book the assessment
How we got to this number

Each piece has a range (the lowest and highest price found) and a central point (the median or midpoint). The big number is the central point; the range shows how much the value can vary. Checked on 20/10/2026. Where it exists, the price in reais comes before the converted dollar.

Attack surface

  • Halo Security, pricing pagechecked on 20/10/2026Vendor price list

    EASM from US$ 399 per month (US$ 4,788 per year). Above 100 exposed assets it requires an enterprise plan.

    How it enters the math: Floor of the range for small companies.

  • UpGuard Breach Risk (table reproduced by RFP.wiki)verified on 03/08/2026Vendor price list

    Per month: US$ 250 (up to 99 people), US$ 500 (100 to 999), US$ 2,000 (1,000 to 9,999). Premium from US$ 19,999 per year. The vendor’s own page only says “contact sales”.

    How it enters the math: Central point, by headcount band. Between bands, interpolated.

Vulnerabilities

  • Per asset per year: Rapid7 InsightVM US$ 25 to 35; Qualys VMDR US$ 17 to 33; Tenable about US$ 37 (100 assets, StatWharf, Sep/2026). The text itself warns: directional, not a quote. None of the three publishes an official price list.

    How it enters the math: Range of US$ 17 to 37 per asset; central point US$ 30 (median of the three midpoints).

Assets and identities

  • Microsoft Entra, pricingchecked on 20/10/2026Vendor price list

    Per user per month, billed yearly: Entra ID P1 US$ 7; P2 US$ 10; Entra ID Governance US$ 7.

    How it enters the math: Central point for the identity side: P2, US$ 120 per user per year.

  • Okta, pricingchecked on 20/10/2026Vendor price list

    Per user per month, billed yearly: Starter US$ 6; Core Essentials US$ 14; Essentials US$ 17. Minimum contract of US$ 1,500 per year. Professional and Enterprise by quote only.

    How it enters the math: Floor (Starter, US$ 72 per user per year) and ceiling (Essentials, US$ 204).

  • ITAM comparisons (Lansweeper, ManageEngine, Snipe-IT)checked on 20/10/2026Third-party estimate

    Hosted Snipe-IT: US$ 399.99 per year, unlimited assets. ManageEngine AssetExplorer: US$ 1,245 per year for 250 assets. Lansweeper: US$ 199 to 239 per month up to 2,000 assets (Pro, US$ 439). The sites disagree with each other and the vendors only show “contact sales”.

    How it enters the math: Floor of US$ 400; central point of US$ 2,600; ceiling of US$ 5,268 per year, up to 2,000 assets; above that, it grows in proportion.

  • US$ 125 per cloud resource per year at launch. It is 2022 data and there is no way to know how many resources a company has.

    How it enters the math: Left out of the sum. It only shows that cloud CIEM exists as a separate cost.

Backup and continuity

  • Vendr, Acronisupdated on 14/10/2025Real contracts (Vendr)

    Backup per workload: an average of US$ 45 to 65 per endpoint per year. Disaster recovery (add-on): US$ 180 to 280 per workload per year. These are Vendr comments, not Acronis’s price list.

    How it enters the math: Backup on every asset; disaster recovery on 10% of them (servers, an Indene assumption).

  • Adentro, cloud backup (Brazilian counterpoint)updated on 22/08/2026Brazilian vendor guide (in R$)

    R$ 85 per server or VM per month (Veeam and management), or about R$ 1,020 per year, plus R$ 0.20 per GB retained per month. No price per workstation. It sells the service.

    How it enters the math: Counterpoint only: R$ 1,020 per server falls inside the disaster recovery range we use (R$ 900 to 1,400).

Governance and compliance

  • Vendr, VantaFeb/2026Real contracts (Vendr)

    Median of US$ 20k per year. By size: up to 50 people, US$ 12 to 28k; 51 to 200, US$ 25 to 55k; 201 to 500, US$ 50 to 110k; over 500, US$ 100 to 250k. Without the external auditor.

    How it enters the math: Range and central point by size (median across the three platforms).

  • Vendr, DrataFeb/2026Real contracts (Vendr)

    Median of US$ 24.9k per year (236 purchases). By size: up to 50, US$ 12 to 28k; 50 to 250, US$ 25 to 65k; over 250, US$ 60 to 120k.

    How it enters the math: Same.

  • Vendr, Secureframe2026Real contracts (Vendr)

    Average value of US$ 20k. By size: up to 50, US$ 12 to 20k; 50 to 200, US$ 20 to 35k; 200 to 500, US$ 35 to 55k; over 500, above US$ 55k.

    How it enters the math: Same.

Trust center and questionnaires

  • Vendr, Vanta (add-ons)Feb/2026Real contracts (Vendr)

    Questionnaire automation and Trust Center: US$ 3 to 8k per year each.

    How it enters the math: Sum of the two: US$ 6 to 16k, central point of US$ 11k. Does not vary with size.

  • Standalone trust center at US$ 8 to 15k per year (SafeBase, estimate) and from US$ 9,600 per year (Conveyor). Neither publishes an official price list.

    How it enters the math: Counterpoint only: confirms the US$ 6 to 16k range is plausible.

Risk in money and vCISO

  • SideChannel, vCISO pricing in 202622/04/2026Third-party estimate

    Monthly retainer by size: up to 50 people, US$ 1.5 to 4k; 50 to 200, US$ 3 to 7k; 200 to 500, US$ 5 to 12k; 500 to 1,000, US$ 10 to 20k; above 1,000, from US$ 15k. I found no price table in reais.

    How it enters the math: Range by size, times 12 months. A vendor of the service writing about its own market.

Risk-in-money platform (CRQ)

  • Pure CRQ platforms cost from “high five figures to six figures” per year in dollars, for mid-size companies. No vendor publishes a price list (Kovrr, Safe Security, RiskLens).

    How it enters the math: Basis of the optional CRQ card: US$ 50 to 100k per year (central point of US$ 75k).

  • ToolsInfo, RiskLens (now part of Safe Security)checked on 20/10/2026Third-party estimate

    RiskLens from about US$ 50k per year, in plans by users and risk volume; Kovrr and Safe Security, the same. A comparison site, with no official price list.

    How it enters the math: Floor of the optional CRQ card (US$ 50k).

Incident response

  • Decripte, what it costs to respond to an incidentno date on the pageBrazilian vendor guide (in R$)

    Retainer (on call in advance): R$ 2 to 15k per month for small and mid-size companies, with forensic hours at a reduced rate. Without a contract, emergency response costs R$ 30 to 80k in a simple case and goes above R$ 150k with ransomware. It sells the service.

    How it enters the math: Range of R$ 24 to 180k per year, central point of R$ 102k (midpoint), up to 1,000 people.

  • TrustedSec, incident response retainerchecked on 20/10/2026Third-party estimate

    Retainers typically cost US$ 15k to US$ 100k per year, depending on size, industry and coverage. No table by size.

    How it enters the math: Gives the ceiling for 3,000 people (US$ 15 to 100k). Between 1,000 and 3,000, interpolated.

Annual pentest

  • Decripte, what a pentest costs in 2026no date on the page (2026)Brazilian vendor guide (in R$)

    Annual pentest for an SMB: R$ 20 to 50k. By type: external infrastructure, R$ 8 to 15k; web application, R$ 18 to 55k; cloud, R$ 25 to 60k; red team, R$ 60 to 150k or more. Ongoing program for mid-size companies: R$ 80 to 200k per year. The page itself has numbers that do not match across sections. It sells the service.

    How it enters the math: Up to 50 people: R$ 20 to 50k. Near 1,000: R$ 80 to 200k (ongoing program). Between the two, interpolated.

  • No Vuln, what a pentest costs in Brazil in 2026updated on 28/09/2026Brazilian vendor guide (in R$)

    One-off pentest of R$ 3 to 60k; most common range R$ 8 to 18k; B2B SaaS or fintech, R$ 18 to 35k. Surcharge of 15% (SOC 2 or ISO) to 50% (fintech). It sells the service.

    How it enters the math: Counterpoint: shows that a single test is cheaper than the annual program used above.

  • HackerSec, what a pentest costschecked on 20/10/2026Brazilian vendor guide (in R$)

    Pentest by a specialized firm: from R$ 35k to more than R$ 200k, depending on the environment.

    How it enters the math: Counterpoint at the top of the range.

ISO 27001

  • Infolock, what ISO 27001 costs in Brazilreviewed on 03/09/2026Brazilian vendor guide (in R$)

    Rollout of R$ 60 to 100k (8 to 12 months), certification audit of R$ 8 to 25k and upkeep of R$ 10 to 30k per year. No range by headcount. It sells the service.

    How it enters the math: First year: R$ 68 to 125k (rollout and audit), basis for small companies.

  • checklist-iso27001.com.br, cost of certificationApr/2026Brazilian vendor guide (in R$)

    First-year total by size: 50 to 200 people, R$ 60 to 140k; 200 to 1,000, R$ 150 to 375k; over 1,000, R$ 360 to 990k. Includes consulting, external and internal audit, tools and training. Values are the page’s estimates.

    How it enters the math: Gives the curve by size. The total includes tools and may overlap with other pieces of the math.

  • Scrut, ISO 27001 certification costchecked on 20/10/2026Third-party estimate

    Certification costs US$ 15k to US$ 60k, depending on size, scope and audit readiness.

    How it enters the math: International counterpoint: R$ 76 to 302k, in the same region as the Brazilian ranges.

Exchange rate

Cost of running the tools

  • Portal Salário and Novo CAGEDOct/2026Carried over, to recheck

    Average salary of a security analyst: R$ 9,120 per month. Page not rechecked in this update.

    How it enters the math: Gives the specialist hourly rate (R$ 60 per hour, with 13th salary and vacation, without payroll charges).

Indene’s assumptions

  • Devices and servers: 1.5 per employee (an Indene estimate, editable above). They drive vulnerabilities, backup and inventory.
  • Disaster recovery: on 10% of assets (servers). An Indene estimate.
  • Running the tool: specialist hours per month are a base plus an increase for every 100 employees, per piece. It is an Indene estimate, not market data; the range goes from 70% to 140% of the central point.
  • Between the sources’ size bands, values are interpolated in a straight line. Above 500 people, several sources only say “from”.
  • The total’s range adds the lowest and highest values of each piece. It is wider than what is likely, because not everything lands at the extreme at the same time.

What was left out of the sum, on purpose

  • Pure cloud CIEM: no current public price (the only data is from 2022 and per cloud resource). Identity governance is used as a reference.
  • Risk quantification platform (CRQ): it is an optional card, off at first, because no vendor publishes a price.
  • External auditor for SOC 2, training, integration with legacy systems and internal rollout hours.

The Brazilian sources (Decripte, Infolock, No Vuln, Adentro, HackerSec) are companies that sell the service and tend to reflect their own prices. That is why the math shows a range and a central point, not a single value.

See your company’s numbers,
in about an hour.

Connect what you already use, get the PDF snapshot and know what to do first. Without hiring anyone.

Book the assessmentTalk to sales
  • Every company isolated from day one
  • Credentials can stay on your network
  • Every action logged, with who approved it

All of Indene’s value,
in a single view.

  1. 1 · You connect

    70 ready connectors

    In about 1 hour you are connected. Whatever has no connector, within 15 days.

  2. 2 · The team works

    10 sectors of AI specialists

    Aegis, the manager who is accountable

    WatchesFixesProvesReports back

  3. 3 · You receive

    8 services you would buy separately

    • Assessment and EASM
    • Vulnerability management
    • Assets and identities
    • Backup and continuity
    • GRC across ten standards
    • Trust center and questionnaires
    • Risk in money and vCISO
    • Incident response

  4. 4 · What changes

    Risk in money terms, with range and confidence.

    • Contracts closed with the proof in hand
    • Risk reduced and proven, fix by fix
    • One contract and one console instead of many vendors
    • 1 investment, no hiring
  • You approve what matters
  • Nothing irreversible ever runs without a person

Who Indene is for.

  • No security team

    We are your team.

    The AI team thinks and prepares, your IT executes with guidance, and you approve. Start with the assessment: in about an hour, you know how the company looks to an attacker and what to do first.

  • With a team or a CISO

    We bring it all into a single view.

    Your team stays in charge. Indene connects what it uses, unifies the inventory and delivers risk in money terms with range and confidence, compliance across ten standards, CMN 5.274 included, audits with a dossier and a report for the board. The AI specialists take the repetitive work off the table.

Our purpose

To put real security within reach of every company: a capable team, detection and response, and the executive view of cyber risk.

Book the assessmentTalk to sales

If you do not have a cybersecurity team, Indene is your team. If you already have one, Indene brings it all into a single view.