About Us

Shared Philosophy

As thought leaders in process efficiency and cybersecurity, our agents were quick to recognize the shifting possibilities and band together in shared purpose and conviction.

We protect the privacy of our clients, while using our array of knowing contacts to gather relevant intelligence without compromising privacy or legality. We do not have any government affiliations or contracts, and our staff are expected to continue to uphold their oaths, obligations, and agreements.

We earn your repeat business by demonstrating high ROI from discrete well-defined and inexpensive engagements.

Business Decisions

We “eat our own dogfood” to deliver high ROI to ourselves:

• We don’t have a sales or marketing team, instead focusing on growing engagement organically through referrals. This is demonstrably more stable and sustainable, with no surges in expenses.
  
• We don’t need a board of directors or layers of approval to get things done, just legal sign-off.
  
• We choose pragmatic solutions, not the coolest or flashiest:
  • This website exists as a landing page, no API integrations, so we chose a managed hosting provider that includes hosting, DDoS protection, backups, and many other services.
    • Inexpensive, low risk, easy to manage, change, or migrate.
    • Sure we could run this site with self-managed multi-region cloud infrastructure and CDN, failover, ad nauseum, but why? If you ever miss this advertising website due to maintenance, please let us know. Until then, 99% uptime is good enough for our purpose here.
    • Took about a day of setup from purchasing the domain to having a functional website.
  • We need some web content, so our engineers write it! Why hire web developers when most of us started our career on websites or web apps?
    
• Working in cybersecurity and compliance, we know what adversaries and stakeholders are looking for. Adept at identifying and mitigating risks, we are experienced implementing separation of concerns, migrating domain hosting, setting up Identity Federation and MFA, penetration testing, etc.
  
• Someone wants a discrete engagement, almost off-book? That’s fine, we can provide a unique non-descript domain for integrations.
  
• We use automated setup of a cloud VM and associated resources with data delivery or ingress for customer APIs based on their needs, risks, and relative costs. We want every customer deliverable to be turn-key, if they had the resources to build everything in-house they wouldn’t need us.
  
• Our ideal outcome is that you love your experience and recommend us to your peers in other organizations, though we do ask that you exercise operational security (opsec) and refrain from mentioning details of engagements on social media.

Our Team

We trust our engineers – with guardrails and legal oversight – to do the right thing.

Our engineers offer you:

• Light Touch. Discretion is a virtue, doubly so for outsiders during these troubling times, especially in the context of our work. Everyone is quite on edge lately. Our engineers will tread lightly with minimal visibility or impact to ongoing operations, and our engagements remain strictly confidential**.
  
• Soft Skills. Larger engagements require more interaction, so our engineers are chosen partly for their ability to adapt to many different management styles, demonstrate empathy, and build rapport with a wide variety of teams from day one.
  
• Breadth of Experience. We pride ourselves in having well-rounded engineers. While each has their own specialties and experience, every one of our engineers must demonstrate a variety of skills across contracts, law, compliance, audits, cybersecurity (red team and blue team), software engineering, site reliability engineering, automation, project management, and incident response. They can often single-handedly operate these engagements, and are talented enough to lead larger engagements.

** Due to the nature of our work, we are subject to NDAs and reciprocal agreements on a regular basis. However, in an effort to improve our algorithms we will try and negotiate permission to add your data or a subset thereof to grow our dataset. This may include a reciprocal agreement that requires us to notify multiple parties in the event of particular data relationships, which generally preclude us from providing certain details of the match (such as organization of origin.) In these cases, we may attempt to correlate via a third-party source at our sole discretion. Our mutually signed agreements will specify data handling, data usage, and all terms and conditions of our collaboration.