Services
Testing, defence and advice, from one person who does all three.
What I offer
Five ways to work together.
- Penetration testingWeb, API, mobile, network and cloud testing from an attacker's point of view.Usually for: Banks, payment providers, fintechs and software companiesLearn more
- Security operationsDetection engineering, SIEM, incident handling and malware analysis.Usually for: Organisations running or building a security operations functionLearn more
- GRC advisoryInformation system audits, ISO/IEC 27001 and security strategy.Usually for: Regulated institutions, public bodies and growing companiesLearn more
- Agentic AI securitySecuring AI agents and LLM features, and automating the security work itself.Usually for: Teams building or adopting AI agents and LLM features, or automating operationsLearn more
- Training and speakingSecurity awareness, technical workshops and conference talks.Usually for: Conferences, universities, government bodies and corporate teamsLearn more
Approach
How I work.
Attack first, then defend.
I work on both sides: testing systems the way an attacker would, and building the monitoring that catches the next attempt. Each side keeps the other honest.
Evidence over opinion.
A finding only helps if your team can reproduce it and see why it matters. Every issue I report traces back to the steps and the data behind it.
One report, two readers.
Engineers need detail they can fix from. Leadership needs risk they can decide on. I write for both and brief both in their own terms.
Process
What working with me looks like.
- 1
You tell me what's at stake
What you need to protect or prove, and by when.
- 2
I reply with an approach
Whether I can help and how I'd go about it, usually within two working days.
- 3
We agree scope
Systems, rules of engagement and timing, in writing, before any work starts.
- 4
The work
Testing, analysis or advisory, carried out to the scope we agreed.
- 5
Report and debrief
Detail for engineers, a summary for leadership, and time to walk through both.
Let's scope it together.
Tell me what you need to protect and by when. I'll reply with whether I can help and how I'd approach it.