Home — Hakai Security

To foresee is to protect. We develop strategies that keep your team always ahead of new cyber threats.

Get in Touch Learn more

More than a team, a revolution in bits and bytes. We challenge, endure, and evolve together.

Hakai is a cybersecurity company founded by experienced specialists.

We prioritize technical excellence and provide customized services with the latest attack techniques, threat detection and monitoring technologies, as well as secure development procedures to minimize or prevent new vulnerabilities.

Get in Touch

Excellence in cybersecurity: Pentest, Red Team, DevSecOps, and specialized services leading your digital defense.

By simulating advanced persistent threats, we put your security measures to the test, revealing real-world risks and enhancing your response strategies.
Learn more about Red Team
We evaluate your security from the perspective of an attacker to identify and fix vulnerabilities before they can be exploited, ensuring a stronger defense against potential breaches.
Learn more about Pentest Team
Integrating security throughout the development process, we ensure that your applications are built resiliently from the start, embedding robust security practices into every phase.
Learn more about DevSec Team
Optimize the capability of detection and response to incidents through collaborative exercises between the Blue Team and the Red Team.
Learn more about Purple Team
Our ASM service provides you with the insights to anticipate and proactively defend against emerging cyber threats, keeping your operations secure and uninterrupted.
Learn more about Quimera X
We collect crucial insights for proactive defense against cyber threats, ensuring resilience and brand protection.
Learn more about Delta 7 Team

Some of our clients

Don't wait to be the target! Invest in your peace of mind and in the success of your company's and your customer's data.

Protect yourself too

Big projects done

Here we highlight some of the main CVEs and Vulns that we've found.

Trend Micro

Hall Of Fame 2016 and 2019 at Trend Micro

D-Link

CVE-2017-11436 - Hidden Backdoor User - D-Link

NXfilter

CVE-2023-3840 (XSS relfected - NXfilter)

CVE-2023-3841 (CSRF - NXfilter)

CVE-2023-6905 (LDAP Injection - NXfilter)

CVE-2023-6904 (CSRF - NXFilter)

Znuny

CVE-2025-26845 (command injection - znuny)

Seq Log Datalust

CVE-2018–8096 - Admin Auth Bypass - Seq Log Datalust

Apache Airflow

CVE-2024-50378 - Insertion of Sensitive Information Into Sent Data

Audiobookshelf

CVE-2025-46338 - cross-site scripting (XSS)

Whistle

CVE-2025-5880 - path traversal

Appdynamics by CISCO

CVE-2018-0225 - SQL Injection - Appdynamics (CISCO)

ADAudit

CVE-2018-19118 - Stack overflow - ADAudit

3CX

CVE-2018-7654 - Path Traversal - 3CX

CVE-2018-14905 - Cross-Site Scripting - 3CX

CVE-2018-14906 - Cross-Site Scripting - 3CX

CVE-2018-14907 - Information Leakage - 3CX

Centreon

CVE-2015-7672 - Cross-Site Scripting - Centreon

CVE-2018-19311 - Cross-Site Scripting - Centreon

CVE-2018-191312 - SQL Injection - Centreon

ForgeRock

CVE-2017-7590 - Cross-Site Scripting - ForgeRock

CVE-2017-7591 - Cross-Site Scripting - ForgeRock

CVE-2017-7589 - Information Disclosure - ForgeRock

Our team

Oliveira Lima

Founder / CHO

Oliveira Lima
Founder / CHO
Oliveira Lima is the founder of Hakai and has more than 14 years dedicated to cybersecurity, focused on pentesting and Red Team operations. As a researcher, he has reported several vulnerabilities in large companies such as Trend Micro, CISCO, D-Link, etc. He has also registered more than 40 CVEs. Oliveira continues to be part of the team leading Red Team operations.
Carlos Vieira

Chief of Intelligence Unit / QuimeraX

Carlos Vieira
Chief of Intelligence Unit / QuimeraX
Professional with experience in Red Team, Pentest and research in Offensive Security. Also works in the intelligence sector.
Yozer Garcia

Security Engineer

Yozer Garcia
Security Engineer
Graduated in computer systems and computer engineering, and certified by Offensive Security as OSCP. Experienced in Offensive Security and Purple Team work such as research, assessment and development of attack mitigations.
Daniel Chactoura

Pentest Leader

Daniel Chactoura
Pentest Leader
Professional with experience in Offensive Security, mainly performing web, API, mobile, perimeter and internal pentests, and has also carried out research. OSWE certified. Leads the Pentest team.
Ricardo Galossi

CEO

Ricardo Galossi
CEO
With more than 10 years of experience in information security, I have worked as CISO at Stone Pagamentos and as an Ethical Hacking instructor and Pentester in several sectors, such as finance, mining, telecommunications and retail.