PT Prefer a light background? Click here.Prefer dark mode? Click here. Talk to Zulti →
cybersecurity · layered defense

Cybersecurity that protects your business without getting in the way.

Five layers: network, web browsing, endpoint, data and awareness, working together. Each one stops part of what gets through; together they really reduce risk.

Book 15 min → See the layers ↓
active layers
5
monitoring
24/7
contract
tailored
The honest premise

No single tool protects 100%. Together they reduce real risk.

A B2B client demanding security evidence. Phishing hitting during work hours. A backup that has never been tested with a real restore. Honest cybersecurity reduces likelihood and impact; it doesn't eliminate risk. Anyone promising absolute protection is selling a fairy tale. What Zulti delivers is layered defense tuned to your operation, with layers that cover each other and truly reduce risk.

the 5 layers

Five layers. One defense.

Each layer covers a different surface of your operation. They work together, installed, configured and operated by Zulti's team. Clients choose what makes sense for them.

01
Layer 01 · Perimeter

Protection for Network(Firewall)

A physical edge appliance inspects all traffic coming in and going out of the company. As-a-service model: hardware as a subscription, with configuration and ongoing maintenance by Zulti's team.

  • Real-time inspection of inbound and outbound traffic
  • Internal segmentation into zones/VLANs
  • Isolation of guests and non-corporate devices
billed · hardware as a subscription
FIREWALL · ACTIVE RULES 14 active
443/tcp · HTTPS✓ ALLOWED
22/tcp · SSH admin✓ ALLOWED
vlan-guest → vlan-corp✗ BLOCKED
3389/tcp · external RDP✗ BLOCKED
tor.exit-nodes✗ BLOCKED
*.malware-feed✗ BLOCKED
23/tcp · Telnet✗ BLOCKED
02
Layer 02 · DNS

Protection for Web browsing(Web Filter)

DNS blocking of known malicious domains (phishing, malware, compromised sites). Reduces risk without turning into productivity policing.

  • Automatic blocking of known phishing and malware
  • Categories agreed with the client, not the whole internet
  • Exceptions unblocked in minutes by Zulti's team
billed · per device
DNS · CATEGORY FILTER 42 categories
Allowed
Productivity Cloud Apps Email News Social media Streaming
Blocked
Phishing Malware Gambling Piracy Adult content Games
03
Layer 03 · Endpoint

Protection for Endpoint(Antivirus)

Active protection on devices: desktops, laptops, servers. Detects and neutralizes malware in real time, with lightweight monitoring during the day.

  • Real-time detection on every device
  • Deep scans in an agreed window (off-peak)
  • Central console operated by Zulti's team
billed · per device
ANTIVIRUS · CONSOLE 14:32
⚠ MALWARE DETECTED 14:32
FileTrojanXYZ.exe
EndpointWORKSTATION-04
CategoryTrojan.Generic
RiskHIGH
✓ Quarantined in 0.8s
✓ User notified
✓ Log sent to the service desk
04
Layer 04 · Core

Protection for Data(Backup)

The last technical layer, and the most critical. Even if everything else fails, there is a restore point to bring operations back.

  • Snapshots stored outside the production environment
  • Periodic restore tests: evidence, not promises
  • Retention agreed per data type
billed · per GB + number of servers
BACKUP · LAST 14 DAYS 4 servers
FILE-SRV-01
DB-SRV-02
APP-SRV-03
MAIL-SRV-04
OK warning failure
next restore · 06/11
05
Layer 05 · Human

Awareness

The layer that covers what no tool covers: the user clicking a suspicious link, a malicious attachment, a targeted scam. Run on the PSA (Professional Services Automation), Zulti's own platform.

  • Ongoing simulated phishing campaigns
  • E-learning tracks by risk profile
  • Monthly dashboard with the real detection rate
ongoing: per user/month · workshop: per session
PSA · Q2 CAMPAIGN 15% clicked
⚠ SIMULATED PHISHING
From banco-suporte@bankco.xyz
To maria@empresa.com.br
Subject URGENT: your account has been locked
3 signs detected
!Domain ends in .xyz, out of the ordinary
!Manufactured urgency: pressure to click without thinking
!A shortened link hides the real destination
— prerequisite
Every layer requires an active MSP hours contract. Zulti's team installs, configures, monitors, adjusts and responds. Without the MSP, a layer becomes a tool with no operator.
Calibration

Calibrated to your real risk. Not to the vendor's catalog.

Where the market pitch is "more tools = more protection", reality is "too many tools = slowness, blocks and antivirus turned off by the users themselves". Zulti tunes things to reduce real risk without becoming the enemy of people who need to work.

✓

Web filtering by category, not by allowlist

Categories agreed with the client, not the whole internet "just in case". An exception for a legitimate site is solved in minutes, not in a 3-day ticket.

✓

A firewall set up for work, not paranoia

Rules designed to keep operations flowing, not to block every new service the company needs to test. Rule changes happen through a formal request and an agreed window.

layer 05 · human

The layer that no tool covers.

The user clicking a suspicious link. The malicious attachment opened without thinking. The scam aimed at whoever approves invoices. Technical cybersecurity stops at the human perimeter, and that is exactly where PSA comes in.

15%
click rate · Q1 → Q2 campaign
P psa · awareness active campaign
— running · wave 2
Q2 campaign · Simulated phishing
Sent412 emails
Detected + reported348 (84%)
Clicked the link63 (15%)
Entered credentials1 (0.2%)
— detection rate · 6 waves +50%
O1O2O3O4O5O6
— tracks · e-learning
Spotting phishing 92%
Passwords and MFA 78%
Social engineering 64%
PSA · Zulti's own platform operated · monitored · tuned
About PSA

Awareness without scare tactics.

A PSA is Zulti's own platform for Layer 05: campaigns, phishing simulations and training tracks, run without having to buy a separate market tool.

Training and campaigns designed to educate, not punish. Simulated phishing shows where the team needs attention; it's not an internal witch hunt.

Ongoing format
Recurring program with PSA

Monthly simulated phishing campaigns, active e-learning tracks, an up-to-date dashboard, and program adjustments by risk profile and how the company works.

billing · per user/month
One-off format
Dedicated workshop

A one-off awareness session, for an event or a specific area of the company.

billing · per session
Five layers, one defense. Run by the team that runs your IT.
Book a call →
Frequently asked questions

Before an incident happens, every CEO asks the same things.

What really protects you, what's just for show, and what you need now.

What if I already have some of the tools (firewall, antivirus, backup)?+
We keep what makes sense. The initial discovery assesses what's installed: what performs well stays (only its operation moves to Zulti); what isn't really protecting you or is out of support gets replaced, with a clear justification, not to push a new product. Clients never pay twice for the same protection. When an existing investment covers a whole layer, that layer leaves the contract scope.
Does cybersecurity fit with LGPD, ISO 27001 and audit or B2B client requirements?+
Yes, in two ways. (1) As controls: several layers (backup, network segmentation, MFA, web filtering, awareness) are formal controls required by LGPD and ISO 27001, and Zulti's operation already produces evidence (configured controls, logs, tested backups, filter policy, documented awareness). Much of what an auditor or B2B client asks for is already available. (2) As a program: when the requirement calls for a formal documented program (written policies, ROPA, an audit-ready dossier), LGPD Compliance e Security & Compliance come in as services of their own. Cybersecurity operates; LGPD/S&C structure and document.
Does it work for companies with branches or remote offices?+
Yes. Cybersecurity runs remotely for the most part (RMM, central console, cloud DNS filtering, replicated backup). Physical hardware (firewall) is configured once and then operated remotely; replacements and on-site visits are handled as separate one-off projects. Zulti serves clients in Piracicaba, the São Paulo metro area and other cities. Location rarely matters for cybersecurity.
How will my team live with it? Will it block legitimate work?+
The policy is calibrated to reduce real risk, not to block work. The web filter blocks agreed categories (not the whole internet just in case); the firewall allows the services the company needs; antivirus is set up so it doesn't slow down users' machines. When a legitimate exception comes up (a site blocked by mistake, a new service to test), it's unblocked in minutes, with no red tape. The idea is security that doesn't become the enemy of people who need to work.
Who it's NOT for

Layered defense doesn't cover everything. Sometimes you need a different kind of provider.

Commercial honesty has kept us going for almost a decade. If you fit any of the scenarios below, it's worth looking elsewhere. Zulti isn't the right partner for that case.

✕
You want a tool without operations or without an MSP contract. Zulti doesn't resell antivirus, firewall or backup as a boxed product for clients to run themselves, and every layer comes with an active MSP hours contract. The model is the full service (selection, installation, configuration, operation) or nothing. Without the MSP, no one maintains what was installed.
✕
You need a human SOC monitoring 24/7 with a fixed overnight on-call team. Zulti provides human support during business hours. For an always-on SOC model, look for a specialized provider.
✕
You need pentesting, threat hunting or in-depth forensics. These are not part of Zulti's current Cybersecurity scope.
✕
You run an environment regulated by a specific standard: PCI-DSS (credit cards), NIST 800-171 (US defense supply chain), Brazilian financial regulation (BACEN/CVM) with intensive audits. These programs require frameworks, controls and governance that call for a different kind of provider.
More from Zulti

Services designed to cover every aspect of your IT.

Operations
Managed Services (MSP)keep IT running · monthly
→
Cloudmigration · hosting · workspace
→
Projects
Studioplatforms, automations and AI
→
Project outsourcingone-off technical project · no MSP
→
Strategy
CISO as a Servicesecurity leadership on demand
→
CTO as a Servicetechnology leadership on demand
→
Security & ComplianceIT maturity · ISO + security programs
→
LGPD Compliancecompliance · ROPA · training
→
Next step

Security doesn't fit in a package. It fits your operation.

A direct 15-minute conversation. No off-the-shelf package, no forty-page proposal. The person you talk to makes the decisions.

Book 15 min →
or if you prefer
contato@zulti.com.br WhatsApp · +55 19 99889-4473
or tell us briefly

Your data is used only to reply to you. Details in our Privacy Policy.