The practice

Calm is a security posture.

Manta is an independent consulting practice for security, cloud infrastructure, automation, and AI. We work with founders, CTOs, and engineering teams at the moments when getting security wrong is expensive — an assessment with a deadline, an architecture decision that will be hard to reverse, a program that has to be built right the first time.

Good security doesn't fight the organization — it reads how the business moves and works with it. That's the practice: pragmatic, evidence-driven, calm under pressure.

We take very few clients at a time. When we work with you, we're actually there.

How we work
Risk over checkbox

Controls exist to reduce real risk. We start from your threat model and your business — not from a template.

Evidence over opinion

Findings come with reproduction steps and context. Recommendations come sequenced by impact, not alphabetically.

Enable, don't block

Security that slows engineering gets bypassed. We design controls that move at the speed of the team.

Presence over process

Good advisory is a relationship, not a methodology. We show up and we stay.

The practitioner
Victor Haberkorn
Principal consultant

Security engineering leader with a career spanning IT operations, financial-sector security, and cloud security leadership. Built and led security programs and teams inside a payments fintech and a European B2B SaaS company; graduate study in cybersecurity in the United States.

Hands-on across incident response, penetration testing, ISO/IEC 27000, risk management, and cloud security. Works in English, Portuguese, and Spanish.

Where we've worked
Payments & financial services

Securing cardholder data environments and regulated financial flows — where an assessment failure is a business failure.

HR technology & B2B SaaS

Building security programs where customer trust is the product — from first policy to a running security team.

Cloud-native infrastructure

Cloud security architecture and automation for teams whose entire footprint lives on cloud platforms.

Senior security judgment, when you need it.
Contact