Naviu

Leading Naviu to become one of the top digital product studios in Europe.

50+ SaaS & AI products delivered 🚀

Unicorn Factory Lisboa

Startup Mentor

Outono | Portugueses em Tech

Outono is a community of Portuguese programmers, entrepreneurs and designers living and working outside of Portugal, with hubs in different cities. We organise events, connect people and startups, and promote the Portuguese Tech Scene globally.

Berlin Hub Ambassador

buildersklub

Berlin-based community, focused on showcasing how innovators are using automation & AI to accelerate growth and scale faster.

Founder

BERLIN STARTUP SCHOOL

MKT & Events Advisor

Blaze Information Security

Account Executive & Partner Manager

Cobalt.io

Partner Account Manager

Fábrica de Cervejas Portuense

Lead a team of 9 people. Together developed an effective brand & sales strategy that drove us to be the fastest growing and highest selling craft beer in Portugal.

Marketing & Sales Director

Structured the Marketing department and built an agile and fast paced team of 4 that managed Digital Brand Marketing, Trade Marketing, Events, PR, In-house content creation, Product development and Go-to-market strategy.

Reporting directly to the CEO, lead yearly budget and strategic plan creation, monitoring & execution, guaranting alignment across all departments and stakeholders.

Marketing Director

Joined the company in its early stages. With a “hands-on” approach, built Cerveja Nortada's brand from the ground up and lead strategic brand initiatives that promoted constant revenue growth.

Brand Manager

SONAE MC

Member of Continente's advertising team. Worked alongside campaign managers, leading content creation for TV, radio, print and digital advertising campaigns.

Content Production Manager

Manifesto

Developed brand strategies for B2C and B2B companies.

Brand Strategist

Turning an idea into a successful SaaS or AI product takes the right strategy, the right team, and flawless execution.

That’s what we do best! We've worked with 50+ B2B companies to build and scale SaaS & AI products that bring results.

With a proven process, clear communication, and a focus on scalability, we make sure your product is built fast and made to laaaast 🚀

Our process involves:

👉 Defining the best product strategy & tech stack
👉 Designing an intuitive & beautiful UX/UI
👉 Building an MVP in 8 to 12 weeks
👉 Scaling it into a robust, full-featured platform

💡 Experts in: React • Django • Node.js • Bubble.io • WeWeb • Xano

Diogo Guerner

How to launch new products in weeks, instead of months?

At the next buildersklub, I’ll be sitting down for a live conversation with João Fernandes, Venture Development Manager at Lufthansa Innovation Hub, to unpack exactly how they do it.

No theory. Just a practical look inside their venture development process and the story of building Cabinblu, an app designed to help passengers with flight anxiety.

You'll get actionable insights on: 
👉 The strategic playbook for validating and building a product with a lean, agile team. 
👉 How you can leverage rapid development tools to successfully build and launch MVPs. 
👉 The mindset and tactics required to overcome the challenges of fast-paced product development.

See you there! 

This event is happening as part of the Thursday Gathering by Venture Café Berlin!

CEO @Naviu / We build SaaS & AI products. Fast and made to laaaaaaaaaast 🚀

How do you take an idea and turn it into a real product in weeks, not months?

Especially inside a 100,000-employee giant?

At the recent buildersklub meetup, I had the pleasure to chat with João Fernandes from Lufthansa Innovation Hub and learn how they approach it.

He walked us through building Cabinblu (an app for flight anxiety) in just 10 weeks.

Here is the playbook on how they did it:

1️⃣  𝐒𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞𝐝 𝐈𝐧𝐧𝐨𝐯𝐚𝐭𝐢𝐨𝐧 𝐅𝐮𝐧𝐧𝐞𝐥 
Opportunity Discovery → Solution Validation → MVP Development → Scale. 
Cabinblu's idea came from Lufthansa's Medical & Health Department addressing flight anxiety (20-40% of flyers). Every idea must answer: "Why should WE build this?" and align with Lufthansa Group's strategy. Aligned incentives = successful products.

2️⃣  𝐋𝐞𝐚𝐧 𝐓𝐞𝐚𝐦𝐬 𝐖𝐢𝐭𝐡 𝐄𝐱𝐩𝐞𝐫𝐭 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 
Each venture runs with 2-3 core people as "entrepreneurs in residence," backed by specialists in marketing, design, and strategy. João partnered with a pilot who has a PhD in flight anxiety to ensure science-backed credibility. Small teams, big impact.

3️⃣ 𝐏𝐫𝐨𝐭𝐨𝐭𝐲𝐩𝐞 𝐢𝐧 𝐇𝐨𝐮𝐫𝐬, 𝐍𝐨𝐭 𝐖𝐞𝐞𝐤𝐬 
Before building anything, João used V0 by Vercel to create a clickable prototype in one morning to test with pilots. Not production-ready, but tangible enough for real feedback and stakeholder buy-in before investing months in development. Show, don't tell.

4️⃣ 𝐍𝐨𝐧-𝐓𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐁𝐮𝐢𝐥𝐝𝐞𝐫𝐬 𝐂𝐚𝐧 𝐒𝐡𝐢𝐩 𝐭𝐨 𝐏𝐫𝐨𝐝𝐮𝐜𝐭𝐢𝐨𝐧 
With engineers focused on high-ROI projects, João used FlutterFlow to build the full app without writing code. ChatGPT and YouTube filled the gaps. Result? App Store launch in 10-12 weeks. Low-code validates fast, then scale with proper engineering if it works.

5️⃣ 𝐑𝐮𝐭𝐡𝐥𝐞𝐬𝐬 𝐒𝐜𝐨𝐩𝐞 𝐃𝐢𝐬𝐜𝐢𝐩𝐥𝐢𝐧𝐞 
2 features got cut from Cabinblu's MVP: calling a pilot (operational complexity) and live flight tracking (complex APIs). João's rule: "We need to understand what is worth building-not just what's exciting to build." Scope discipline beats feature bloat. Ship what validates your hypothesis, nothing more.

6️⃣ 𝐒𝐩𝐞𝐞𝐝 𝐊𝐢𝐥𝐥𝐬 𝐔𝐧𝐜𝐞𝐫𝐭𝐚𝐢𝐧𝐭𝐲 In corporate environments, momentum dies fast. Leadership changes, opinions shift, budgets move. "Go from idea to MVP as fast as possible. If we take too long, we lose traction and alignment." Speed isn't just efficiency-it's survival strategy. Validate with real paying customers in weeks, not months.s a masterclass in moving from "slide deck" to "shipped product."

Huge thanks to João for the insights, to everyone who joined us and to Naviu, 9x and Venture Café Berlin for making it happen!

Thank you for being part of the klub! 👊

Will AI really be able to build complex software on its own?
 
There’s a lot of skepticism out there:
“It’s just vibe-coding. It's a fad.”
“It lacks real craft and strategy.”
“It’ll always need human oversight.”
 
And for now, that’s true.
But that misses the bigger picture.
 
This isn’t a question of if. It’s a question of when.
 
Let’s look at a simple logic:
 
👉 The industry is in a sprint to achieve AGI
 
👉 Expert timelines vary, but more and more serious researchers are talking about 5 to 15 years.
 
👉 What does AGI mean? It means machines that can think, learn, and reason just like humans... or, more likely, better.
 
So, if we successfully build a machine that can out-think a human engineer...
 
Why would we say it won't be able to write complex software?
 
I get it. It’s hard to picture.
 
It was probably just as difficult for someone in the 1800s to believe we could get inside a 200-ton metal device and fly across an ocean.
 
And yet, now we fly every day.
 
I think the real debate isn’t whether AI will eventually build full systems, run autonomous codebases or do any other complex task.
 
I think the real question is:
 
What happens when it can?

Ethiack

On a mission to secure business technology through Autonomous Ethical Hacking.

ethiack.com is a cybersecurity SaaS platform powered by ethical hackers and AI for continuous and proactive security testing.

Co-Founder & CEO

AngelsWay 🔷

Angels Way is a community fund supporting startups in Portugal. I seek to identify entrepreneurs and accelerate innovative companies with social impact and scalable growth.

Angel Investor

ACI EUROPE

ACI Europe - Cybersecurity Committee Member

CIONET Portugal

Advisory Board

C-MAST (Centre for Mechanical and Aerospace Science and Technologies)

Projects: SpaceLAB, MECSE, NANOSTAR, ANTAEUS, BIOD'AGRO
http://www.aerospace.ubi.pt

Research Fellow 

SPACEWAY

PENTHACK

Co-founder & COO

Space Generation Advisory Council

In support of the United Nations Programme on Space Applications.
• The communication channel between national students and professional space networks;
• Plan, organize, and take part in international space projects and educational events;
• Active voice of the Portuguese youth on the United Nations space policy.

National Point of Contact for Space in Portugal (NPoC)

AgniKul Cosmos

International Business Architect  

Instituto de Telecomunicações

Preliminary Design of a SAR based on a 5.3 GHz Software Defined Radio (SDR) communication system for the INFANTE nanosat constellation.

R&D Engineer / Systems Engineer

An entrepreneur and explorer living by faith, for family, with freedom.

I love breaking norms, brainstorming ideas, scaling businesses, and connecting with people.

Go ahead and hit me up!

Jorge  Monteiro

A Rising Star, they say...

Last week, we had the honour of standing among the companies shaping the future of Portugal. 

Ethiack was awarded the "Rising Star" award from Deloitte. 

I want to first deeply thank Deloitte, especially Pedro Brás da Silva, for the kind invitation.

This trophy is just a reminder. 
A reminder that we must keep innovating, keep growing, and keep proving that Portugal can build world-class technology that competes globally.

But the truth is: no one builds anything alone. 
This goes, as always, to our team, who turn ambition into execution, to our customers who trust us with what matters most, and to our investors who believe and push us to the moon. 

This award does not celebrate what we have done. 
It celebrates what we are about to do.
And I can assure you, the best is still ahead.

CEO, Ethiack | Securing your tech with Autonomous Ethical Hacking

🚨Critical vulnerabilities alert!

Don’t trust your WAF, If you have React and Next.Js exposed you are at serous risk now! 

CVE-2025-55182 and CVE-2025-66478. 

Both critical vulnerabilities in React and Next.Js are being massively exploited at this moment. 

At Ethiack we are already detecting these vulnerabilities from yesterday and were one of the first companies in the world detecting it.

WAFs are not enough, Some #React2Shell targets are relying in WAFs but can still be exploited with bypass. 

So, detect and fix it. That’s the way ! 

If you are our client, rest assured, just check the platform and mitigate your risks ASAP.

If you are not, and you need help detecting it, just DM me

Pentesting is broken. 

Most pentests are just expensive disappointments.

You pay $30k-$100k. 
Wait weeks for a report. 
Get a PDF with 200 findings. 
Half are false positives. 
The other half? You already knew about them from your vulnerability scanner.

Meanwhile, your attack surface keeps growing. 
New code ships. 
Infrastructure changes. 

And that pentest you just paid for? 
Already outdated.

This is the annual pentest trap.
Compliance loves it. 
Criminals laugh at it.

Here's what changes with continuous pentesting:
→ Hackian tests 24/7, not once a year
→ Every finding is validated with proof of exploitation
→ You get prioritised risks, not noise
→ Event-driven testing when your infrastructure changes

What's your biggest frustration with traditional pentesting?

Portugal’s cybersecurity ecosystem is levelling up.

Huge conference on cybersecurity and digital transformation in Portugal with the participation of major players in the ecosystem. 

Great to see the birth of an association with the ambition to reshape the landscape: APECSYS - Associação para a Promoção do Ecossistema Digital Sustentável  

The launch of APECSYS shows a clear commitment to a stronger and more sustainable digital ecosystem.
  
A special thank you to João Annes for curating this magnificent event and for raising the bar every single year.

No alternative text description for this image

TLDR: Need a killer marketer that want to kick ass and launch Ethiack to another planet. If you want to prove your skills and grow fast, this is the place.  Who do you recommend? Tag them

We are looking for a seriously talented marketer to help Ethiack grow faster and louder.

Not a “post once a week and pray for engagement” marketer.
We want someone who can create eye catching content, turn complex cybersecurity into something people actually stop scrolling for, and build real demand for a product that’s reshaping pentesting with AI.

This is a big growth challenge.
A chance to come in, own the narrative, shape the brand, and prove you can drive awareness in a noisy space.

What you’ll find
• A challenger product that blends AI pentesting with real hacker intelligence
• A brand that’s transforming and needs a creative engine
• A team moving fast and expecting high impact
• Room to grow fast as the company scales globally

Looking for someone bold, creative, technical enough to get it, and hungry to build something that stands out in cybersecurity.

If you know someone who should see this, tag them, message me, or send smoke signals.

Job link here
https://lnkd.in/dxi89rkq

Everyone on LinkedIn is growing 300 % YoY.
Reality check: the actual 2025 SaaS benchmarks by Jurassic Capital.

It is a very different story.
Growth in the real world is slower, uneven, and frustrating.

Most founders compare themselves to the top 1% stories, forgetting that the top 1% is not the market. It is the exception.

When you measure your performance against LinkedIn theatre, you make two mistakes:
- You feel you are behind, even when you are exactly on track.
- You lose focus, chasing speed instead of substance.

Reach for the stars, yes. 
And don't settle with benchmarks, never. 

But keep your feet firmly on the ground.

Ambition without realism is a fantasy.
Realism without ambition is stagnation.
You need both.

And always remember 
"You can't lose if you don't quit"  

Keep going!

I was shocked to know about these stats from 2025.

And it changed my mindset...

Today, I am doing a keynote on proactive cybersecurity to the Retail industry with Sonae MC, one of our proud and first customers. 

Usually, I don't put examples of cyberattacks in my presentations, because I don't like to sell by fear. 

But when Patrícia Delgado showed me these stats, I was shocked at first and and then it stuck with me. 

These are all in just 2025.
These are only the big ones that make to Press. 

We need to talk about this more often, not to scare people, but to make them realise that enough is enough. 

This is scary. 
Cybersecurity is broken. 
We keep investing in defences, and the attacks keep rising. 

Good security is not good enough.
We shall change the mindset. 
Test today. Secure Tomorrow.

Hack or Get Hacked.
Retail has no middle ground anymore.

27/Nov I will at Security Magazine Retail event with a simple message:

If you don’t test your systems, attackers will do it for you.
Your choice.

Retail is a paradise for attackers: Complex stacks, legacy systems, vendors everywhere, thousands of exposed assets.

That is why Sonae moved from reactive checks to proactive prevention.
They use Ethiack to run continuous Agentic Pentesting across their attack surface.

24/7 testing, real proof of exploit, no noise.

In the keynote we will share
• why retail is becoming one of the most targeted sectors
• what changes when you adopt continuous offensive testing
• how Sonae is using proactive security to stay ahead

Director na Security Magazine - Revista dos profissionais de segurança

Hack or Get Hacked — Cibersegurança Proactiva na Era da Inteligência Artificial
A Sonae MC e a Ethiack marcam presença na 3.ª edição da Conferência sobre Segurança no Retalho e Grande Consumo, com a participação de Jorge Monteiro e Patrícia Delgado, que apresentarão o caso de sucesso e demonstração prática na sessão “Hack or Get Hacked – Cibersegurança Proactiva na Era da Inteligência Artificial”.
💡 Uma sessão que mostrará como a inteligência artificial está a transformar a forma como as organizações previnem, detectam e respondem a ameaças, e como uma abordagem proactiva pode reforçar a resiliência cibernética e a confiança digital no retalho.
📅 27 de novembro
 📍 Lisboa
 🔗 Mais informações e inscrições em www.smconferencia.pt
#SegurançaNoRetalho #Cibersegurança #InteligênciaArtificial #TransformaçãoDigital #SonaeMC #SMConferência

I’m an aerospace engineer by training.

In aerospace, we obsess over one thing: failure modes.

You don’t “feel safe”. 
You prove safety with testing, redundancy, and verification.

Then I moved into cybersecurity and saw the norm:
• Annual pentests
• Long reports
• Delayed Action
• Prioritisation by scoring, not exploitability
• Teams drowning in findings that don’t translate to reduced risk

So we built Ethiack with a simple belief:
Security should behave like engineering, not paperwork.

Pentesting, continuously.
- AI pentesting agents for scale and speed.
- Hacker intelligence for creativity and depth.
- Proof of exploit so you’re not guessing.
- Actionable remediation

You don’t need “more alerts” or reports 
You need exploit-validated results anytime

If you’re in Security and you want to see how this looks on a real attack surface, DM me “show me” and I’ll share a overview of your attack surface and how you get ROI from offensive security to show your boss.

If you want to judge a pentest, don’t ask “how many vulnerabilities did you find?”

Ask these 10 questions:
	1.	Did you provide proof of exploit for all issues?
	2.	Did you chain weaknesses into an attacker path?
	3.	Did you demonstrate impact on real assets and data?
	4.	Did you validate auth boundaries and privilege escalation?
	5.	Did you test business logic, not just scanners?
	6.	Did you test with realistic assumptions, not perfect docs?
	7.	Did you quantify blast radius, what else falls after the first domino?
	8.	Did you include step by step reproduction that an engineer can follow?
	9.	Did you recommend fixes that reduce class risk, not just patch one instance?
	10.	Did you retest fixes and confirm closure?

If the answer is “no” to half of these, you didn’t get a pentest. You got a report. 

This why we built Ethiack Pentest.
Combining AI pentesting agents with hacker intelligence, get you both scale and depth, within reasonable cost. 

You can try it.
No impactful exploitable results, no payment.

There is no doubt.

The future of cybersecurity will be AI vs AI.

Criminals are already using AI to identify vulnerabilities faster, craft better exploits, and automate attacks at scale.

Your defence? 
Still relying on annual pentests and manual security reviews that take weeks.

That's not a fair fight.
Agentic AI pentesting changes the game. 

Our Hackian agents test thousands of attack scenarios in minutes. 
They validate exploitation. 
They adapt to your infrastructure changes in real time.

It's not about replacing human hackers. 
It's about speed and scale. 
Humans are creative. AI is relentless.

Hackian provides continuous, validated security that keeps pace with the speed of threats.

Because the future is too fast for humans alone.
Want to see Hackian in action?

On the 4th December, I will participate in a roundtable about the Impact of cybercrime on our economy and society 

Thank you to APECSYS - Associação para a Promoção do Ecossistema Digital Sustentável for the opportunity and for setting up such an impactful conference. 

https://lnkd.in/dZzzA4Sv

Contratulations Gartner for the pivotal moment for cyber industry

CTEM - Continuous Threath Exposure Management needed to be a top priority at CISOs table and now I am sure it will be more than ever.

If you are looking to assess how your exposure is exploitable, check out 
ethiack.com 

We provide continuous visibility, relentless testing and actionable risks, so that security teams focus on what matters and get some peace of mind.

Excited to share that the brand new Magic Quadrant for Exposure Assessment Platforms (EAP) has just been released! I’m incredibly proud of the work that went into this important research.

Special thanks to my brilliant co-authors, Jonathan Nunez and Dhivya Poole, as well as many more of my wonderful colleagues, for their dedication and insights throughout the process.

This Magic Quadrant arrives at a pivotal moment for exposure management, as EAPs are rapidly becoming foundational tools for continuous threat exposure management (CTEM). I hope this research helps organizations better understand the evolving landscape and make informed decisions.

Check out the report; Gartner subscription required: https://lnkd.in/e2C_6V35. 

#Gartner #MagicQuadrant #ExposureAssessmentPlatforms #EAP #ContinuousThreatExposureManagement #CTEM #ExposureManagement #VulnerabilityManagement

One more cosmic hack from 0xacb, aka André Baptista
This time, the target was Grafana

Read the full research here

Hacker. CTO @ Ethiack. Invited Professor at University of Porto and Porto Business School.

While playing the Hack.lu CTF 2025 with xSTF team, I was able to solve a 0day challenge: a new bypass for a previous Grafana CVE, resulting in XSS and Account Takeover!

Our research team quickly checked for this vulnerability across the Ethiack customer base on October 20th, enabling rapid remediation and detection ~24 days before the official release.

This high-severity vulnerability works by chaining two distinct bypasses to achieve full account takeover.

Read my complete technical analysis👇

Open article: Grafana CVE-2025-6023 Bypass: A Technical Deep Dive by blog.ethiack.com

Grafana CVE-2025-6023 Bypass: A Technical Deep Dive

Retail has a bigger problem than legacy tech. 
It has impactful vulnerabilities hidden in plain sight.

After running autonomous pentesting across several retail environments, these are the impactful vulnerabilities we keep finding again and again in Retail clients.

CVEs (from 2019-2025) and Specific Vulns 
Not once. Not twice. Repeatedly. 

Some of my favourites in 2025 with CVSS are:

Debug Endpoint pprof (CVE-2019-11248): 8.2
TotoLink Router Command Injection (CVE-2024-24328): 9.8
Time-Based Blind SQL Injection: 9.5 
TotoLink Router Command Injection 2 (CVE-2024-24329): 9.8
CData RSB Connect SSRF (CVE-2023-24243): 8.9
Unify HiPath Cordless IP Default Login: 8.3
Chaosblade RCE (CVE-2023-47105): 8.6
Dataease Default Login: 8
Reflected XSS: 5.5
Grafana XSS or SSRF (CVE-2025-4123): 7.1
Open Proxy to internal network: 8.6
GitLab info disclosure via Open API: 6.9

And the list goes on.

If you work in retail, this is your daily reality.
Not ransomware gangs with Hollywood tooling.
Not nation-state attacks.
Vulnerability Exploitation in Exposed Assets

The uncomfortable truth
Retail has one of the biggest attack surfaces in the economy.
Multiple brands, multiple stores, legacy, APIs, apps, suppliers, ecom, POS, cloud, on-prem.

Everything glued together with duct tape and good intentions.

Teams work hard. 
But the surface grows faster than they can manually test.
And attackers love that asymmetry.

What proactive retailers are doing instead
They’re moving away from once-a-year pentests and passive scanning, and into continuous, real offensive testing across the entire attack surface.

That is why companies like Sonae MC invested early in proactive prevention.
Because when you see the full picture every day, you can fix issues before an attacker even notices them.

The benchmark is simple
If you’re not testing your environment 24/7, someone else is.
And they’re not doing it ethically.

taplio

The Battle

Diogo Guerner

Jorge Monteiro

Followers

Posts

Engagements

Likes

Performance ScoreDiogo Guerner's LinkedIn Performance

Performance ScoreJorge Monteiro's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Diogo Guerner

Jorge Monteiro

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Diogo Guerner's LinkedIn Performance

Performance ScoreJorge Monteiro's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreDiogo Guerner's LinkedIn Performance