SECURITY ASSESSMENT · BOCA RATON, FL
Digital Security Assessment and Data Protection Support
We are a forensics laboratory first, which changes how we look at your environment. We spend our working lives reconstructing how attackers got in, and we bring that view to assessment work.
Enetsec builds and tests digital security programs for companies in Boca Raton, Florida and across South Florida. We assess systems, harden them, and support GDPR, CCPA and Brazil’s LGPD data protection obligations. The laboratory has worked in cybercrime since 1999. Call (561) 846-9010 to book an assessment.
Most of the organizations that call us during an incident had a warning in their logs weeks earlier that nobody was reading. That is the gap this service exists to close.
Assessment: Finding What an Attacker Would Find
An assessment starts with the plain question an intruder asks. What is exposed, and which of it is soft?
We review your external footprint, remote access paths, identity and account hygiene, privilege assignment, patch state on internet-facing services, backup design and, critically, whether your logging would actually let you answer questions after an incident. That last point is the one most reviews skip. A perfect firewall configuration is of limited help if the logs roll over before anyone reads them.
We deliver findings in priority order with the reasoning attached, so your team can see why a finding sits where it does rather than being handed an unexplained list.
Hardening: Fixing the Findings in an Order That Makes Sense
Nobody fixes everything at once. The useful question is which three things to do this month.
We work with your internal team or your IT provider on remediation sequencing: closing dormant accounts, enforcing multi-factor authentication on the paths that actually matter, separating administrative credentials from daily-use accounts, tightening remote access, and extending log retention so that the record survives long enough to be useful. Then we re-test, and we document the delta.
THE TWO CHANGES
In our experience the two changes that most often would have prevented the incident we were later called about are disabling accounts at the moment someone leaves, and putting multi-factor authentication on remote access. Neither is expensive. Both get postponed.
Data Protection: GDPR, CCPA, and Brazil’s LGPD
If you hold personal data, the law now asks you to account for it. Different laws ask different questions, and which ones apply to you depends on where your customers and staff are, not on where your office is.
GDPR and CCPA for the US and international buyer
GDPR is the European Union’s General Data Protection Regulation. It reaches any organization processing the personal data of people in the EU, including US companies with EU customers, staff or web traffic. CCPA, as amended by the CPRA, is California’s consumer privacy statute and applies to qualifying businesses handling California residents’ personal information.
We support both from the evidence side: data mapping so you know what you actually hold and where, access and retention review, breach determination and documentation when an incident occurs, and the forensic record that a supervisory authority or an attorney general’s office will ask for. When a regulator asks what data was affected, an assessment based on documented examination is a very different answer from an estimate.
LGPD for organizations with Brazilian operations
LGPD is Brazil’s data protection statute, the Lei Geral de Proteção de Dados (Law 13.709/2018). It is Brazil’s counterpart to GDPR, and it applies to organizations processing the personal data of people in Brazil regardless of where the processing happens.
This is a genuine capability rather than a line on a list. Enetsec was founded in Curitiba, Brazil in 1999 and has worked in the Brazilian legal and regulatory environment ever since, opening US operations in 2019 (Source: Enetsec, 1999–2026). Very few South Florida firms can support a Brazilian data protection obligation with people who have actually practiced under it. If your company has a Brazilian subsidiary, a Brazilian customer base, or Brazilian staff records, that is the work.
What Our Clients Say
ON THE RECORD
“My Registered Investment Advisory firm has had the privilege of working with Enetsec Corp for our digital security needs, and I can’t recommend them highly enough.”
Regulated firms make up a meaningful part of this work, because a registered advisory practice, a medical group or a law firm carries obligations that an ordinary business does not.
How This Connects to the Rest of Our Work
Assessment and response are the same knowledge applied at two different moments. If you are dealing with an event right now, start at incident response for ransomware. If you have been attacked and need to know who and from where, see identification of the origin of internet attacks.
Elsewhere in Incident Response
Frequently Asked Questions
NO. 1 Do you handle business and corporate investigations?
Yes. Corporate work is a substantial share of this laboratory’s caseload: intrusion response, insider activity, intellectual property removal by departing staff, business email compromise, vendor and partner disputes, and internal policy investigations. We work directly with in-house counsel, outside counsel and leadership, and we structure the engagement so that findings are documented to an evidentiary standard from the first day, whether or not the matter ever becomes litigation.
NO. 2 Do you work with legal teams and organizational leadership?
Routinely, and usually with both at once. Counsel needs the work scoped so that privilege is preserved and the findings are defensible. Leadership needs to know what to tell the board, the insurer and the customers. We produce a technical report for the lawyers and a plain-language briefing for the executives, drawn from the same examination so the two never contradict each other. Wanderson Castilho has given 40 depositions in the past four years.
NO. 3 Is my data encrypted while you have it?
Yes. Acquired images and case data are held on encrypted storage with access limited to the examiners assigned to your matter. Media in transit is encrypted and sealed. Working copies are destroyed at the close of the engagement under your written instruction, and originals are returned or retained per the retention terms you agree in the engagement letter. Every access to case storage is logged, which is also what allows us to attest to evidence integrity later.
NO. 4 Can you tell me if my phone has spyware or stalkerware on it?
We can examine a device for indicators of unauthorized monitoring software: unexpected profiles and certificates, unusual permissions, unrecognized background processes, anomalous data usage and installation artifacts. A clean examination is meaningful evidence but it is not proof that nothing was ever present, because some tooling removes itself. We examine devices you own or are lawfully authorized to examine. We do not access a device belonging to someone else, under any circumstances.
NO. 5 Has your firm been doing this since 1999?
Yes. Wanderson Castilho founded Enetsec in Curitiba, Brazil in 1999 and established US operations in 2019, with the laboratory now in Boca Raton, Florida. The practice has analyzed more than 6,000 cases across that period. Castilho holds a BSc in Physics from the Federal University of Paraná, is Cellebrite, AccessData and Certified Computer Examiner (CCE) certified, and is a member of the Association of Certified Fraud Examiners.
NO. 6 Are the forensic tools you use vetted and accepted by courts?
We work with the mainstream, independently validated toolsets used across the discipline, including Cellebrite and AccessData platforms, on which our founder is certified. Tool acceptance in court rests on validation, documentation and reproducibility rather than on brand. We record tool and version for every step, and where a finding matters we verify it with a second method so that the conclusion does not depend on any single piece of software.
Book an Assessment
If you want to know what an attacker would find before one does, call (561) 846-9010 or use our contact page. We will scope the assessment against the obligations that actually apply to your organization, including Brazilian ones if that is part of your business.
Call (561) 846-9010, email [email protected], or start at /contact-us/. If an event is active, begin at incident response for ransomware, or trace how it began with identification of the origin of internet attacks.
CONFIDENTIAL INTAKE MON–FRI 8:00 AM – 5:00 PM EN / PT / ES