# Hugo Frauches

> Hugo Frauches is a CTO, Applied AI Architect, Cybersecurity Executive, Consultant, and Speaker based in Brazil (fluent in English and native in Portuguese). He designs and operates agentic AI systems for security operations in production, with privacy, evaluation, guardrails, and human-in-the-loop controls for regulated organizations.

## Consulting, Advisory & Speaking Areas

- **Applied AI Architecture & Agentic Systems**: Production architecture on LLM APIs, tool calling, structured outputs, RAG, automated evaluations, LangChain/LangGraph, guardrails, and human-in-the-loop decision boundaries.
- **Cybersecurity Strategy, SOC/MDR & Incident Response**: 11+ years in cybersecurity across offensive security (Red Team, penetration testing), 24/7 SOC/MDR operations, vulnerability management at scale, cyber threat intelligence, and incident response war rooms.
- **AI Governance & Security Controls**: Shadow AI governance, prompt-injection defense, least-privilege agent tool access, per-customer data isolation, LGPD, ISO/IEC 27001, ISO/IEC 27701, and NIST CSF.
- **Executive Advisory & Keynotes**: Technical counterpart and advisor to CIOs, CISOs, and executive boards in financial services, healthcare, energy, cooperatives, public sector, and industry.

## Key Track Record & Credentials

- **11+** years in cybersecurity, seven of them leading this practice
- **90+** organizations served in project work
- **30+** continuous SOC, Red Team and vulnerability contracts
- **20+** incident responses and forensic investigations
- **3 AI products in production**: ISA Cyber (June 2025), ISA Horizon (May 2026), and ISA Insight (May 2026).
- **Education**: Postgraduate study in Applied AI Engineering (Coders University); Postgraduate degree in Cyber Threat Intelligence (Instituto DARYUS, 2022); Degree in Game Development and Design (FAESA).
- **Certifications**: Claude Code in Action — Anthropic (2026); Fortinet NSE 3 — Fortinet (2026); CompTIA CySA+ — CompTIA (2023); Check Point DemoPoint Rising Star — Check Point · Recognition (2022); Rapid7 InsightIDR Certified Specialist — Rapid7 (2020); Check Point Certified Security Expert, CCSE R80 — Check Point (2018); F5 Certified Administrator, BIG-IP — F5 Networks (2018); CompTIA Security+ — CompTIA (2017); Fortinet Certified Associate and Fundamentals Cybersecurity — Fortinet; Microsoft Certified: Azure Fundamentals — Microsoft.

## Primary Pages (English & Portuguese)

- [Home (EN)](https://hugofrauches.com/) | [PT-BR](https://hugofrauches.com/pt-br/): I’m Hugo Frauches. I design and run agentic AI for security operations, from the executive conversation to production, with the privacy, evaluation and human controls that regulated teams expect.
- [About (EN)](https://hugofrauches.com/about/) | [PT-BR](https://hugofrauches.com/pt-br/about/): Hugo Frauches is a CTO, Applied AI Architect, and cybersecurity executive with 11+ years of experience leading penetration testing, 24/7 SOC/MDR operations, incident response, and agentic AI in production.
- [Selected work (EN)](https://hugofrauches.com/work/) | [PT-BR](https://hugofrauches.com/pt-br/work/): Production case studies of agentic AI systems for cybersecurity conceived, architected, and led by Hugo Frauches: ISA Horizon (attack surface intelligence), ISA Insight (vulnerability copilot), and ISA Cyber (AI SOC platform).
- [Field experience (EN)](https://hugofrauches.com/experience/) | [PT-BR](https://hugofrauches.com/pt-br/experience/): Field cybersecurity and AI leadership record across 90+ organizations, 30+ continuous SOC, Red Team, and vulnerability management contracts, and 20+ major incident responses and forensic investigations.
- [Writing (EN)](https://hugofrauches.com/writing/) | [PT-BR](https://hugofrauches.com/pt-br/writing/): Essays, technical analyses, and field notes by Hugo Frauches on applied AI architecture, cybersecurity governance, incident response, product engineering, and technical leadership.
- [Talks (EN)](https://hugofrauches.com/talks/) | [PT-BR](https://hugofrauches.com/pt-br/talks/): Keynote talks, executive committee briefings, and technical presentations by Hugo Frauches on AI security, Shadow AI governance, agentic SOC operations, SAST/DAST automation, and cyber threat intelligence.
- [Lab (EN)](https://hugofrauches.com/lab/) | [PT-BR](https://hugofrauches.com/pt-br/lab/): Interactive applied AI explorations by Hugo Frauches: inspectable decision-routing boundaries for agentic autonomy, evidence confidence, risk impact, and human-in-the-loop controls.
- [Let’s talk (EN)](https://hugofrauches.com/contact/) | [PT-BR](https://hugofrauches.com/pt-br/contact/): Start a conversation with Hugo Frauches regarding applied AI architecture, cybersecurity consulting, executive advisory for CIOs and CISOs, keynote speaking, or strategic partnerships.

## Production AI Systems (Case Studies)

- **ISA Horizon** (AI external attack surface intelligence, in production since May 2026): An agent that maps external exposure and leaked credentials the way an attacker would look, with a person validating every finding before it is shared. Case study: https://hugofrauches.com/work/#isa-horizon | Product: https://www.isahorizon.com.br
- **ISA Insight** (AI vulnerability operations copilot, in production since May 2026): Turns findings from multiple scanners into risk-prioritized remediation plans, and answers questions about them in natural language. Case study: https://hugofrauches.com/work/#isa-insight | Product: https://www.isainsight.com.br
- **ISA Cyber** (Agentic AI SOC platform, in production since June 2025): A multi-agent platform that triages, enriches, investigates and correlates security alerts, and opens qualified incidents around the clock. Case study: https://hugofrauches.com/work/#isa-cyber | Product: https://www.isacyber.com.br

## Published Articles & Field Analyses

- [Make it exist first, make it good later: why starting simple accelerates real products](https://hugofrauches.com/writing/make-it-exist-first-make-it-good-later/) | [PT-BR](https://hugofrauches.com/pt-br/writing/faca-existir-primeiro-melhore-depois/): From the evolution of SpaceX’s Raptor engine to building software and AI in production: why the right architecture comes from contact with reality, not a blank whiteboard.
- [Security in the age of AI: protecting data from intelligent threats and leaks](https://hugofrauches.com/writing/security-in-the-age-of-ai/) | [PT-BR](https://hugofrauches.com/pt-br/writing/seguranca-na-era-da-ia/): The content of my talk at Natercoop’s Conecta TI 2026: what changed, where companies are exposed, and a 90-day plan to govern AI use.
- [Leading also means making the decision nobody wants to make](https://hugofrauches.com/writing/the-decision-nobody-wants-to-make/) | [PT-BR](https://hugofrauches.com/pt-br/writing/liderar-tambem-e-tomar-a-decisao-que-ninguem-quer-tomar/): Putting a decision off has consequences too. On judgment, firmness with respect, and staying accountable for what follows a hard choice.

## Selected Talks & Executive Briefings

- **Security in the age of AI: protecting data from intelligent threats and leaks** (Conecta TI 2026 · Natercoop, 2026-10-30, Talk): Shadow AI, prompt injection, deepfake fraud and the wider attack surface, followed by governance, usage rules and a 90-day plan.
- **Deep and dark web: when data becomes currency** (Bandes, 2026-09-30, Awareness talk): An awareness talk on the market for exposed credentials and everyday practices that help protect corporate information and access.
- **Safe use of tools and protection of sensitive information** (Bandes, 2026-09-28, Awareness talk): What an attacker finds after a single click, and the everyday habits that limit the damage: information classification, LGPD duties, ransomware and the safe use of tools, including generative AI.
- **Automating SAST & DAST with AI: how far can we go without a human in the loop?** (TIES / Data Saturday 2026, 2026-09-19, Technical talk): A practical approach to AI-assisted SAST and DAST, combining reproducible evidence, risk prioritization, and human validation.
- **Protecting business in the era of autonomous AI** (Amcham Espírito Santo, 2026-07, Executive committee discussion)
- **The new era of the SOC: surviving AI-powered attacks** (BSides Vitória 2026, 2026-06-20, Conference talk)
- **Presenting ISA Cyber at its official launch** (ISA Cyber Official Launch, 2025-07-01, Product presentation)
- **Strategies for the new attack surface** (I Workshop de Tecnologias de Redes do PoP-ES, 2022-07, Technical talk)

## Contact & Profiles

- Contact page (EN): https://hugofrauches.com/contact/
- Página de contato (PT-BR): https://hugofrauches.com/pt-br/contact/
- LinkedIn: https://linkedin.com/in/hugo-frauches
- GitHub: https://github.com/hugofrauches15
- X: https://x.com/FrauchesHugo
- Sitemap: https://hugofrauches.com/sitemap.xml
- Full LLM Context: https://hugofrauches.com/llms-full.txt