Work
Clients who let us put their names on the wall
Composite details are used where a finding would identify a production path. Quotes are from the people pictured, given for this site.
Fintech · Northline Payments
Broken object-level authorization in a live payments API
“They found an authorization gap our own scanners had marked as informational. We shipped the fix before the next card-scheme review.”
Daniel Cho, CTO
Healthcare · Vale Health
Ransomware tabletop and an incident-response retainer
“The tabletop was uncomfortable in the right way. For the first time the clinical and IT leads told the same story.”
Nia Okoye, CIO
B2B SaaS · Arbor
Cloud misconfiguration that exposed customer exports
“They treated our staging environment like production. That is the only reason I trusted the report.”
Elena Voss, VP Engineering
Financial services · Kestrel Capital
External pentest for a regulated investment platform
“Quiet, precise, no theatrics. Our audit committee actually read the executive letter.”
Samir Haddad, CISO
Next step
Tell us what you need answered.
A 30-minute scoping call is enough to know whether a pentest, a cloud review, or a retainer is the right buy. We will say if it is not.