Expertise

AI security

How to secure GenAI, LLM and agentic AI systems: current OWASP threat classes, layered controls, agent authority, retrieval isolation and monitoring.

Cloud security

Multi-cloud security practice: landing zones, identity, posture management, MITRE ATT&CK-aligned detection engineering and CIS hardening baselines.

Compliance

Turning DORA, NIS2, ISO 27001, GDPR and the EU AI Act into one control set with reusable evidence and aligned reporting clocks.

Threat modeling

A practical STRIDE-based threat modeling method for cloud, application and AI systems, built to be run by engineering teams.

Incident response

IR lifecycle aligned to NIST SP 800-61r3 and CSF 2.0, cloud and identity playbooks, detection coverage and post-incident learning that changes controls.

OSINT

Using open-source intelligence defensively: attack-surface discovery, executive exposure including AI-assisted pretexting, and awareness training that changes behaviour.

Identity & Zero Trust

Entra ID hardening, Conditional Access authentication strengths, privileged access management and identity attack-path analysis with BloodHound.