Security work, done by the People who ship it.
The practice that hardens NeoAgi, forged at Amazon, Meta, Microsoft, GoDaddy, and more; available to your team as an engagement.
vCISO
Seasoned, experienced security leader on retainer to assist with running, or building your security capabilities. Virtual, or Fractional, CISO duties can accommodate a wide array of needs from augmenting an existing team to serving as a board advisor. We have considerable experience building and running security organizations across eCommerce, FinTech, and SaaS verticals within high regulatory requirements.
- Governance, Risk, and Compliance Lifecycles
- Threat Detection and Hunting Program Support or Creation
- Board and Customer Security Reviews and RFP Automation
- Incident Readiness: Runbooks, Tabletop, On-Call escalation
- Ransomware Recovery and Mitigation
- PCI DSS, SOC2, HITRUST, HIPAA, DoD IL, PKI CAB Forum, Private Equity and SEC Experience
M&A Diligence
Technical and security diligence performed by some of the best in the industry, delivered inside your deal timeline. Over 10 years, dozens of completed deals totaling over 5B of purchasing, hundreds of 'not-appropriate' evaluations. We have the experience to understand the deal, know how to support a valuation, and most importantly know when to walk away. We can work to support the acquiring team or defending the acquired party by being embedded into the team or as a non-participating third party evaluator.
- Diligence on the complete deal, not just limited to Technical and Security aspects
- Findings mapped to deal risk, not severity labels
- Day-one integration and remediation plan
- Read-out for the deal team in plain language for multiple lines of business
- Engagements always look to improve deal process for future opportunities.
Security Assessments
Architecture, code and cloud assessments performed within your constraints. We think like threat actors, and expose real threats that apply to you.
- Build out of Threat Models with your organization and capabilities
- Design and assessment of components and processes that matter
- Cloud and identity configuration review. Specializing in AWS.
- AI & Non-Human Identity Containment Specialization. Ensure access in your environment is controlled and guarded, not just shut down.
- Every finding is raised and managed in concert with an owner, a proposed resolution, and remediation costs
We reply within one business day. No sales sequence.