Saipos runs the operating system for over 25,000 restaurants across Brazil, processing more than 11 million orders monthly. That's a massive attack surface - every QR code scan, every digital menu load, every delivery routing decision is a potential vector. The platform connects point-of-sale terminals, waiter apps, back-office operations, and over 100 integrated third-party services into a single cloud-based system, which means the security perimeter is as wide as the restaurant floor and as deep as the logistics chain.
Founded in 2017 with a team of 51-200, the company has secured recent investment from iFood, Brazil's dominant delivery platform, tightening the integration between restaurant operations and delivery logistics. Their intelligent delivery routing system and QR code ordering features sit at the intersection of physical and digital infrastructure - exactly where threat models get interesting. The core challenge: securing a real-time system where a compromised endpoint doesn't just mean data loss, it means someone's dinner doesn't show up.
For security professionals, the scope is concrete: cloud infrastructure serving a high-throughput, real-time transaction environment across a fragmented market of independent restaurants and chains. The work involves protecting payment flows, securing API integrations across 100+ platforms, and maintaining uptime for an industry where downtime is immediately visible. No abstract threat modeling here - the system either processes the order or it doesn't, and 11 million monthly transactions leave no room for ambiguity.
