Noteable Client Engagements
State Critical Infrastructure - Provided security & risk assessment services, internal/external vulnerability & penetration testing, OWASP web application assessments on internal/external portals, GPS map tracking and toll collection, comprehensive NIST 800-53 security posture review, mobile application API security review, Policy and Procedure review.
Health & Human Services - Security services, Policy and Procedure review, internal/external vulnerability & penetration testing, comprehensive OWASP web application testing of health portals and databases, NIST 800-53 security posture review. nation state hack remediation.
State Superior Court - Security services including external vulnerability & penetration testing, WiFi penetration testing, social & physical penetration testing of courthouses, jury tampering and perimeter surveillance.
DoD Military - Penetration testing services on large scale IoT deployment, NIST 800-53 assessment. Review of existing systems for NIST compliance. Policy and Procedure review. Security gap analysis.
Banking & Finance - Designed & deployed a ISO 270001 hybrid AWS cloud solution for financial futures & options trading to distribute multi-cast market data.
Financial Industry - Conducted investigations to uncover software infringements, identify intellectual property theft incidents and exfiltrated source code from infringing party.
Private Company - Triage $5 million ransomware attack. Negotiated with threat actor. Provide technical guidance for identification, containment, and mitigation while also helping the business develop an operational plan for engaging external counsel, insurance and communicating with clients to mitigate business exposure.
Government Contractor - vCISO services to bring the entire organization inline with NIST 800-53 security framework. Implemented XDR solution with 24/7 SOC monitoring. Designed and implemented an incident response plan, DR and Business Continuity Plans.
