Identity is the attack surface. Most organisations have spent years building it and minutes securing it. I work with IT teams and MSPs who need the expertise to close that gap — without waiting months for a large firm to start work.
Over 80% of security incidents involve compromised credentials or abused access. The attacker doesn't break in — they log in. Usually through an account that was never properly scoped, a delegation that was never reviewed, or a service account that still had Domain Admin from a project five years ago.
I work with enterprise IT teams, MSPs, and infrastructure leads who carry that risk and know it. My focus is the full identity stack: the directory layer, privilege controls, governance alignment, and the automation that makes remediation stick past the engagement.
I don't run a team. There's no account manager between you and the person doing the work. What you scope is what you get — delivered by someone who has rebuilt forests post-ransomware, onboarded thousands of accounts into PAM, and cleaned up the kind of legacy environments where no one knows what half the permissions do.
Five focused disciplines. Each has specific deliverables, backed by enterprise delivery experience. You know what you're engaging before the work starts — fixed-scope or time-and-materials depending on what the situation needs.
Select an engagement to expand the scope, risk context, and outcomes.
Two product-focused ventures built from problems seen directly in the field. Identity security services and investigative tooling that practitioners actually need.
If you know the problem, describe it. If you don't know where to start, that's fine too — that's what the first conversation is for. Either way, you'll hear back from me directly.