Independent cybersecurity consultancy
Security that scales with your business.
Build a security program customers trust, with executive strategy backed by hands-on implementation
The operating principle
Security should accelerate growth, not slow it down. The secure path becomes the easiest path for your engineering team.
Services
Cybersecurity services
From fractional executive leadership to hands-on platform engineering, scoped to your stage.
Virtual CISO
Executive security leadership: strategy, customer trust, board reporting, and risk management, scaled to your stage.
View service 02AI Security Advisory
Secure AI adoption, governance, and architecture reviews for teams shipping AI: innovation without unacceptable risk.
View service 03Cloud & Platform Security
Secure cloud foundations across AWS, GCP, and Azure: least privilege, security automation, and developer enablement.
View service 04Product & Application Security
A secure development lifecycle: developer-friendly guardrails, supply chain protection, and security automation.
View service 05Kubernetes & AI Workload Security
Protect AI workloads on Kubernetes: zero trust architecture, service mesh engineering, and production cluster reviews.
View service 06Conference & CTF Consulting
For organizations launching conferences, villages, training events, and capture-the-flag competitions.
View serviceBuilt, shipped, and presented
Selected work
Applications & platforms
OWASP CTF
Built and operated the competition platform for the flagship application-security community's global CTF events.
View project
Blue Team Village CTF
Engineered the defensive-security competition platform run at major conferences for thousands of competitors.
View project
BSides Philadelphia
Helping steer Philadelphia's community security conference: programming, operations, and community growth.
View project
OWASP Secure Agent Playbook
Contributing OWASP-grounded procedures for securing AI agents, from code review to AI agent security audits.
View project
DopaHits
Live music discovery app: concerts tonight, this weekend, and beyond, with trending artists and venues for your city. Designed, built, and operated end to end.
View project
Presentations
Securing AI Workloads in Kubernetes
Conference talk
Leveraging AI for Advanced Cyber Defense
Tech in Motion
A Deep Dive on Implementing Developer-Centric Application Security (DevSecOps)
Cloud Security Alliance, Delaware Valley chapter
How Microsoft Made Me Love SIEMs Again
BSides Philadelphia
Full career history on LinkedIn →
Let's talk about your security program.
A 30-minute intro call: your goals, your environment, and whether this is a fit. No pitch deck, no obligation.