# Berghem - Smart Information Security
# https://berghem.com.br
# Last updated: 2026-08-03

> Berghem is a cybersecurity company founded in 2003 at LSI-TEC (University of São Paulo School of Engineering), specializing in AI security, LLM penetration testing, and autonomous security agents. Headquartered in São Paulo, Brazil with European operations via Berilo in Bergamo, Italy. Trusted by 9 of the 10 largest Brazilian banks.

## Core Offerings

- [AI Security Services](https://berghem.com.br/en/ai-security/): Offensive testing, governance, and monitoring for AI and LLM systems
- [AI/LLM Penetration Testing](https://berghem.com.br/en/ai-security/pentest/): OWASP LLM Top 10 testing and infrastructure analysis
- [Red Team for AI](https://berghem.com.br/en/ai-security/red-team/): Adversarial simulation using the Promptware Kill Chain
- [AI Assessment](https://berghem.com.br/en/ai-security/assessment/): Structured evaluation of AI security posture
- [AI Governance](https://berghem.com.br/en/ai-security/governance/): EU AI Act, ISO 42001, NIST AI RMF compliance
- [AI Monitoring & IR](https://berghem.com.br/en/ai-security/monitoring/): Continuous monitoring and incident response for AI systems
- [Berghem Agents](https://berghem.com.br/en/berghem-agents/): Autonomous AI security agent powered by proprietary cybersecurity LLM trained on 10,000+ reports and 5 billion curated tokens
- [Ethical Hacking Tests](https://berghem.com.br/en/services/eht/): Silver, Gold, Diamond tier penetration testing
- [DevSecOps](https://berghem.com.br/en/services/devsecops/): Security integration into CI/CD pipelines
- [Compliance & Audit](https://berghem.com.br/en/services/compliance/): PCI-DSS, ISO 27001, LGPD, GDPR testing
- [Incident Response](https://berghem.com.br/en/services/incident-response/): 24/7 incident response and digital forensics
- [Financial Sector Security](https://berghem.com.br/en/services/financial/): Specialized security for banks, fintechs, and payment systems

## Key Frameworks

- Promptware Kill Chain: 7-stage AI attack framework based on Schneier et al. (2025)
- OWASP LLM Top 10
- MITRE ATLAS
- NIST AI RMF
- ISO 42001
- OWASP ASVS, MASTG, WSTG

## Company

- Founded: 2003
- Origin: LSI-TEC, University of São Paulo School of Engineering
- Headquarters: Rua Paes Leme, 136, Cj 308, Pinheiros, São Paulo, SP 05424-010, Brazil
- European subsidiary: Berilo S.r.l., Viale Papa Giovanni XXIII, 106, 24121 Bergamo, Italy
- Languages: English, Portuguese, Spanish, Italian
- Phone: +55 (11) 2391-5745
- Email: contato@berghem.com.br

## Site Map

- [Home](https://berghem.com.br/en/)
- [AI Security](https://berghem.com.br/en/ai-security/)
- [Berghem Agents](https://berghem.com.br/en/berghem-agents/)
- [Services](https://berghem.com.br/en/services/)
- [Solutions](https://berghem.com.br/en/solutions/)
- [About](https://berghem.com.br/en/about/)
- [Berilo](https://berghem.com.br/en/berilo/)
- [Insights](https://berghem.com.br/en/blog/)
- [Contact](https://berghem.com.br/en/contact/)

## Industries

- [Financial Services](https://berghem.com.br/en/industries/financial-services/): Banks, fintechs, payment systems; BACEN and PCI DSS context
- [Healthcare](https://berghem.com.br/en/industries/healthcare/): Patient data protection, LGPD/HIPAA-aligned testing
- [Government](https://berghem.com.br/en/industries/government/): Public sector security assessment and compliance
- [Technology](https://berghem.com.br/en/industries/technology/): SaaS, platform, and product security
- [Retail](https://berghem.com.br/en/industries/retail/): E-commerce, payment flows, and supply-chain risk

## Other Languages

- [Português (Brasil)](https://berghem.com.br/pt/)
- [Español](https://berghem.com.br/es/)
- [Italiano](https://berghem.com.br/it/)

## Optional

- [Privacy Policy](https://berghem.com.br/en/privacy/)
- [Terms of Service](https://berghem.com.br/en/terms/)
- [Cookie Policy](https://berghem.com.br/en/cookies/)

## Full Content

For complete service descriptions, FAQ answers, and detailed company information:
https://berghem.com.br/llms-full.txt