Turning an idea into a successful SaaS or AI product takes the right strategy, the right team, and flawless execution.

That’s what we do best! We've worked with 50+ B2B companies to build and scale SaaS & AI products that bring results.

With a proven process, clear communication, and a focus on scalability, we make sure your product is built fast and made to laaaast 🚀

Our process involves:

👉 Defining the best product strategy & tech stack
👉 Designing an intuitive & beautiful UX/UI
👉 Building an MVP in 8 to 12 weeks
👉 Scaling it into a robust, full-featured platform

💡 Experts in: React • Django • Node.js • Bubble.io • WeWeb • Xano

Diogo Guerner

I studied cinema. Not computer science.
 
I did study some business along the way, but the foundation? Film school.
 
And honestly, I think it's one of the best things that happened to my career in tech.
 
When I tell people I run a digital product studio, the first question is usually about my technical background. When I say "film school," people get a bit surprised.
 
But here's what studying cinema actually teaches you:
 
- How to tell a story.
- How to structure information so people feel something.
- How to direct attention.
- How to take a big, messy idea and distill it into something clear.
 
That's product development.
 
Every great product is a story. There's a protagonist (your user), a conflict (their problem), and a resolution (your solution). If the story doesn't make sense, the product won't either.
 
At Naviu, we build digital products and AI for non-tech companies. Most of our clients don't care about the tech stack. They care about whether the product makes sense for their people.
 
That's a storytelling problem, not an engineering one.
 
I'm not saying you don't need great engineers. You absolutely do.
 
But the people who can bridge the gap between "what the tech can do" and "what the human actually needs"?
 
Those are the ones shaping the best products right now.

CEO @Naviu / Launch digital products & AI solutions at startup speed

I gave my coworker a promotion: he's now called Claudius Maximus.

After a couple of weeks using Claude's Cowork, I'm not exaggerating when I say this is the most productive I've ever been: creating documents, building presentations, prospecting, writing content (yes, part of this post too 🤣)

Things that used to eat half my day now take minutes.

It's like having a senior team member who never sleeps and somehow knows a little bit about everything.

We're entering a phase where solo founders and tiny teams can operate like companies 10x their size. Not because they work harder. Because their AI coworkers do the heavy lifting.

If you haven't tried it yet, you're leaving hours on the table every single week.

What are the best use cases you've seen? Drop them 👇

What happens when AI stops chatting and starts dialing?
 
Not a chatbot. Not an assistant. An actual AI that picks up the phone, handles qualification and closes conversations.
 
Most people are still focused on text-based AI. Meanwhile, companies are quietly automating their entire sales and operations with voice agents.
 
That's why on Thursday, March 12, I'm hosting Philipp Baumanns at the buildersklub in CIC Berlin.
 
Philipp co-founded telli (YC-backed), previously scaled Enpal to 150+ people, and has been deep in the AI voice agent space.
 
I'll be sitting down with him for a fireside chat on the real ROI of AI voice agents, followed by a live demo:
 
👉 The founder journey from scaling Enpal to building a YC-backed AI startup 
👉 Why voice agents are one of the fastest ways to expand sales and ops capacity 
👉 Building a production-ready voice agent in minutes, live on stage 
👉 How these agents handle real objections and trigger actions directly in your CRM
 
But we're not just going to talk about it. You'll see it in action.
 
If you're in Berlin and want to go from "I should really try AI in sales" to "I just saw an agent book a meeting live," this one's for you.
 
​This event is happening as part of the Thursday Gathering by Venture Café Berlin
 
📅 Thursday, March 12 
📍 CIC Berlin 
🎟️ Spots are limited
 
Link in the comments 👇

Something I keep noticing across our projects at Naviu:
 
The teams delivering the most impact are getting smaller.
 
Not because companies want to cut costs (though that helps). But because the tools have changed the math.
 
AI handles a lot of the repetitive work. One senior engineer with the right stack covers ground that used to take 3 or 4.
 
But the real advantage of small teams isn't speed. It's clarity.
 
Small teams don't lose weeks in alignment meetings. They don't write specs for the sake of writing specs. They talk to the customer, prioritise, and ship.
 
We work with non-tech companies and corporates who need digital products built fast. And the pattern is always the same: the moment you add unnecessary layers, momentum dies.
 
What works instead:
 
- A senior-led team that owns the problem end to end.
- Clear checkpoints, not endless handoffs.
- Iteration based on what's real, not what's in a slide deck.
 
This doesn't mean big teams are useless. It means that for most digital initiatives, you don't need 20 people. You need the right 5.
 
The companies that figure this out first will have a serious advantage.

Is AI making us go out of business?

I’ve been asked this a lot lately, and honestly, I’m feeling the exact opposite.

We’re seeing more and more non-technical businesses that finally see a path to building their own software to scale operations.

The vibe coding era is changing the starting line:

👉 Better Prototypes: Clients show up with functional AI prototypes they built themselves.
👉 Clearer Vision: Because they’ve already "played" with the logic, they know know better what they need.
👉 Faster Execution: Internally, we’re using AI assisted tools to ship complex apps at a speed that wasn't possible two years ago.

I think we’re seeing the Jevons Paradox at play.

As the cost of building software drops, the demand doesn't decrease, it increases. As the barrier to entry lowers, there are simply more opportunities to build.

But here’s the catch: as coding becomes a commodity, the craft becomes more valuable.

Just because everyone has a powerful camera in their pocket doesn't mean everyone can be the new Steven Spielberg.

The machines are writing a lot of the code, but humans are still the ones telling the story.

Your digital initiative stalled. Again.
 
And I bet it wasn't because the technology was wrong.
 
After working on dozens of digital products for corporates, I keep seeing the same pattern. The projects that fail almost never fail because of tech.
 
They fail because of:
 
- No clear owner. Everyone is "involved," nobody is accountable.
- No defined success metric. The team builds features instead of solving a problem.
- Internal politics slowing every decision to a crawl.
 
The companies that actually ship? They do three things differently:
 
- They assign one person who owns the outcome. Not a committee. One person.
 
- They define what success looks like before writing a single line of code. Not "we need an app." More like "we need to reduce manual order processing from 4 hours to 20 minutes."
 
- And they bring in external partners not because they can't build internally, but because an outside team moves faster, challenges assumptions, and doesn't get stuck in org chart politics.
 
The tech is the easy part. Alignment is the hard part.
 
If your digital initiative is stuck, look at the org chart before you look at the tech stack.

An entrepreneur and explorer living by faith, for family, with freedom.

I love breaking norms, brainstorming ideas, scaling businesses, and connecting with people.

Go ahead and hit me up!

Jorge Monteiro

This weekend, I wrote an opinion article for Público about digital sovereignty, the elephant in the room that Portugal and Europe are still trying to ignore. 

All of Europe loves to talk about digital sovereignty.
But we keep building on infrastructure we don’t control.

In the last few decades, Europe lost digital independence completely.
Most of our critical technologies, from cloud to data, cybersecurity, and now AI, are not European.

That is a huge economic and geopolitical risk.
We know it, but we keep acknowledging it. 

Until the day that someone crazy enough (like this American president) decides to push a button and turn us off.  

Portugal has talent. Europe has talent.
What we lack is scale, speed and will.

We lack political will, yes, but we also lack decision-maker will. 
In cyber, we keep buying American or Israeli, just because ... 
(I will do another post about this very soon)

We like to tell ourselves that it's because of quality, sure!!
But, usually, we pay more, and we are not better served. 

Digital sovereignty is not about protectionism.
It is about resilience and independence.

If we want Europe to compete, we need:
• Strategic investment in cybersecurity and AI
• Real support for European tech companies
• Faster decision-making at the policy level
• Long-term commitment, not short-term optics
• European Decision Makers in private companies to grow some balls and buy European tech 

Cybersecurity is more than your company assets.
It is a national infrastructure.

The real question is simple:
Do we want to build, or do we want to depend?

Jorge  Monteiro

CEO, Ethiack | Securing your tech with Autonomous Ethical Hacking

Money vs Purpose 

If you had to choose only one, could you?

For some reason, André Oliveira and Francisco Raio challenged me to participate in this roundtable. And, of course, you cannot say no to those 🐐 .

But I still wonder why, because I explicitly told them that I am still looking for the answer.

Yes, you heard me, I don’t fully know.

Some days I say purpose.
Other days, I know it’s money.

Money means:  Freedom. Control. Security for my family. Independence.

I am not going to lie, that matters to me. 
More than what I want to admit sometimes. 

But purpose is what makes the struggle tolerable.
Purpose is what makes the stress feel chosen, not imposed.

And here’s the part most founders won’t admit:
Ambition is not always noble.

Part of me wants to build something big to prove something.
Part of me wants financial independence fast.
Part of me wants impact.
Part of me just doesn’t want to feel average.

If I optimise only for money, I risk becoming empty.
If I optimise only for purpose, I risk becoming irresponsible.

I’m still navigating both.
And sometimes they conflict.
And other times they are so aligned.

So, what is the answer to “money vs purpose?”
I guess you will need to wait for my final answer on March 13th 2026, in Mafra

Get ready for one more Upside Club retreat.
100 founders in one room.
No filters allowed.

zerodayclock.com was released this week, and WOW

This is scarier than you can imagine. 

I knew the problem existed, but this research made it so much clearer. 

I realised that the main problem is TIMING. 

One pentest is not enough. 
Ten pentests are not enough. 

Some people think we are here to replace pentesters.
We are not. 

We are here because there is no time left.
Offensive security needs to be continuous. Now.

Ethiack uses AI to test your entire attack surface, 24/7. 
We test external assets and internal assets
We test assets that you know, and that you don't know
We test Web, API, Mobile, Infra, Network and, soon, Cloud and Active Directory.
We test when you push code.
We test when you do an update. 
We test when there is new intelligence. 

100,000+ findings validated. 
Near-zero false positives.
24/7 testing you

Because the next vulnerability will be exploited in hours. 
So please don't wait for your annual pentest schedule.
TIMING is for the essence

Secure tomorrow. Test today. 
Ask me how.

 #Cybersecurity #PenetrationTesting #InfoSec #CISO #SecurityLeadership

All European CISOs say they care about digital sovereignty.

Almost none act like it. IMO, they just don't care.

Two days ago, I made a general post about digital sovereignty, mostly focused on a political view, but now I want to speak directly to CISOs in Europe. 

You complain about dependency on the US.
You speak about strategic autonomy.
You attend panels about European resilience. 

Then you sign another 3-year contract with a US or Israeli vendor.

Not because it’s objectively better.
Not because you ran a fair technical benchmark.
But it feels safer for your career.

Big logo. Big brand. Lower personal risk.

Let’s be honest.

Most vendor decisions are driven by:
• Career risk mitigation
• Board optics
• Gartner quadrants
• “Nobody ever got fired for buying X”

Not by sovereignty.
Not by ecosystem impact.
Not by long-term European resilience.

You want Europe to build world-class cyber companies?
You want digital independence and sovereignty?
 
Then someone has to take a calculated risk.
Someone has to back European vendors early.
Someone has to create reference cases.
Someone has to stop hiding behind “proven vendor”.

Cybersecurity is a national infrastructure.

If you are a CISO in Europe, you are not just a buyer.
You are a strategic actor.

The question is simple:
Are you protecting your company or are you protecting your CV?

So, grow some balls and take some risks. 
And I assure you that you will get even better results at lower prices.

Because we, Europeans, care and deliver. 
The others? Just oversell. 

And yes, Ethiack is 100% European.

"AI pentesting can't find business logic vulnerabilities."

Hackian just found two in n8n and SonarQube.

No scanner would catch these. 
80%+ of pentesters would not catch these.

Because they're not signature-based vulnerabilities. 
And they're not the typical checklist vulnerabilities. 

They're business design flaws.
And complex ones in complex targets.

n8n example:
Hackian exploited how the workflow automation was architected, bypassing intended access controls through legitimate-looking API calls.

SonarQube  example:
Hackian accessed projects it wasn't supposed to by understanding and exploiting the permission model itself, not by breaking authentication.

These are the "ghosts" everyone says AI can't find.

Here's the difference:
Traditional tools look for patterns. 
Known signatures. 
Predictable exploit chains.

Hackian doesn't scan. It reasons.
→ It explores applications like a human hacker would
→ It tests assumptions about how things should work
→ It experiments with edge cases and logical inconsistencies
→ It validates real exploitation, not theoretical risk

This is Agentic AI pentesting. 
Not a scanner with better marketing.

To everyone who says AI can't find business logic vulnerabilities.
Here you go.  Two real exploits.

And if Hackian can find them, criminals can too.

Full technical breakdown: 
https://lnkd.in/eZENHg82

Still think AI pentesting is just hype?
Try Ethiack and you will see

Open article: Hackian and the Ghosts in Your Business Logic: When Your App’s Rules Are the Real Vulnerability | Ethiack — Autonomous Ethical Hacking for continuous security by ethiack.com

Hackian and the Ghosts in Your Business Logic: When Your App’s Rules Are the Real Vulnerability | Ethiack — Autonomous Ethical Hacking for continuous security

I will be in Madrid all week with some of our hacking team to speak and attend some events. If you are around, ping me to get some Tapas! 

The events
Efcom: https://lnkd.in/eRgbjWDp
RootedCon: rootedcon.com

Open article: RootedCON - RootedCON by rootedcon.com

AI Hacking in 2026 will BREAK your security strategy

See how in my last blog 

Everyone is excited about AI for defense.

Few are prepared for AI for offense.

In 2026, the attacker will:
• Enumerate your entire attack surface in seconds
• Chain vulnerabilities autonomously
• Test payload variations at machine speed
• Iterate without fatigue
• Exploit before your CVE gets a name

The shift is not incremental. It is exponential.

We already see AI agents:
• Discovering logic flaws without predefined signatures
• Performing multi-step exploitation
• Validating impact autonomously
• Learning from failed attempts

Traditional security assumes:
Patch fast. Scan regularly. Pentest yearly.

That model is structurally outdated.

Because AI attackers do not wait for your next assessment.

If exploitation can be automated, defense must be continuous.

Not more dashboards or alerts. Real offensive validation.

The question is not whether AI will hack better. It already does.

The question is whether your security strategy was built for 2022 or 2026.

Read all here

Open article: The State of AI Powered Hacking in Early 2026: What Is Real, What Is Hype, What Is Missing | Ethiack — Autonomous Ethical Hacking for continuous security by ethiack.com

The State of AI Powered Hacking in Early 2026: What Is Real, What Is Hype, What Is Missing | Ethiack — Autonomous Ethical Hacking for continuous security

Should we do pentests or a red team?
Security Leaders ask me this. I usually simplify it:

Pentesting: Find vulnerabilities in your known attack surface. 
Red Teaming: Simulate real attacker behaviour, test detection/response.

The problem is that most companies do neither ENOUGH.

Annual pentest: 
Great snapshot. Useless 2 weeks later when you ship new code. 

Red team engagement: 
Awesome for testing defenses. Expensive and slow to repeat.

What enterprises actually need:
- Continuous pentesting (not once a year)
- Automated red team scenarios (not just manual)
- Validation that vulnerabilities are exploitable (not just scanner noise)

This is why we built AI-powered autonomous pentesting: 
→ Tests your full attack surface continuously 
→ Runs 1,000s of attack scenarios in minutes 
→ Validates exploitability
→ 30x faster than manual pentesting

NIS2 and DORA  compliance are forcing this shift. 
Security can't be point-in-time anymore.

Security leaders, are you doing continuous testing yet? 
What's holding you back?

Exposure Mgnt & Offensive Security Specialist | Sr. Director Analyst at Gartner |

The cybersecurity landscape is evolving, and so should your approach to security testing! Discover why the future of penetration testing lies in Continuous Offensive Security Testing and learn practical steps to implement a robust, ongoing program. Dive into Gartner’s latest insights:
 
- The Future of Pen Testing Is Continuous Offensive Security Testing – Explore why traditional pen testing is no longer enough and how continuous strategies can better protect your organization
- How to Implement a Continuous Offensive Security Testing Program – Get actionable guidance on building and maintaining a proactive security testing framework.
Stay ahead of threats and make security a continuous journey, not a one-time event! #Cybersecurity #PenTesting #ContinuousSecurity #GartnerInsights
 
Use https://lnkd.in/euWHYPRw
https://lnkd.in/eKURPcJS (Gartner client entitlement required)

taplio

The Battle

Diogo Guerner

Jorge Monteiro

Followers

Posts

Engagements

Likes

Performance ScoreDiogo Guerner's LinkedIn Performance

Performance ScoreJorge Monteiro's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Diogo Guerner

Jorge Monteiro

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Diogo Guerner's LinkedIn Performance

Performance ScoreJorge Monteiro's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreDiogo Guerner's LinkedIn Performance