About

Our Story

BRACEWorks was founded to close a specific gap: organizations moving fast into cloud infrastructure and generative AI often outrun their own security governance. Much of the advice available to them is shaped by whatever a vendor is selling that quarter.

BRACEWorks is built to be different from the outset. It's an independent practice with no reseller incentives, no product to push, and a single objective: helping clients understand and reduce real exposure in cloud and AI environments.

About the Founder

Leandro Momesso de Moraes is the founder and principal consultant at BRACEWorks Consulting. He has spent more than two decades designing and securing complex technology infrastructure, from enterprise and industrial networks to multi-cloud environments and, most recently, generative and agentic AI systems.

His technical background includes the Cisco Certified Internetwork Expert (CCIE) certification, the Certified Kubernetes Administrator (CKA) certification, and the AWS Certified Machine Learning Engineer certification, alongside graduate-level study in Data Science and Artificial Intelligence. Over his career, he has designed and implemented security architectures for organizations across the energy, mining, media, finance, and cloud infrastructure sectors.

BRACEWorks Consulting was founded to bring that same rigor, architecture first, vendor-agnostic, and grounded in real operational risk, to organizations navigating cloud and AI adoption in the United States.

Our Approach

We don't start with a product. We start with your environment: what you've built, what you've adopted, what's actually at risk, and what you can realistically operationalize. Every recommendation is evaluated against your infrastructure, budget, compliance obligations, and operational maturity.

Independence, in Practice

Being vendor-agnostic isn't a slogan on our site. It shapes how engagements are structured:

• We do not receive referral fees or reseller margins tied to specific security products.
• Our assessments can recommend native cloud tooling (e.g., AWS GuardDuty, AWS Config, Microsoft Defender for Cloud, Google Security Command Center), third-party platforms, or no new purchase at all, whichever fits.
• Our methodology (BRACE) and technical frameworks are our own intellectual property, independent of any single vendor's proprietary approach.