Home / Work

Selected engagements

Real breaches, stopped cold.

A selection of engagements where we turned a potential headline into a non-event. Names used with permission.

Security operations desk with dual monitors tracking a live intrusion
Containment47s

Red Team · Aegis Bank · 2025

Caught a supply-chain breach in 47 seconds.

A poisoned software update slipped past legacy tooling. Our detection engine flagged the anomalous outbound traffic instantly, isolated the affected hosts, and rolled back the change before a single account was touched.

0Financial loss
0.0MAccounts safe
0Records exposed
StackCobalt StrikeSuricata
Engineer hardening endpoint devices across a global fleet
Downtime0hrs

Pentest · Orbital · 2024

Zero-trust across 14,000 endpoints in 30 days.

A global fleet with no unified identity layer. We rolled out autonomous EDR and micro-segmentation to every device and site, cutting the attack surface by 96% without a single hour of downtime.

OKEndpoints
1%Surface cut
30dTo rollout
StackCobalt StrikeSuricata
Incident response war-room with analysts containing a hospital ransomware attempt
Hospitals40

Hardening · Verdant · 2024

Ransomware-proofed 40 hospitals.

Connected medical devices made every site a target. We deployed continuous monitoring and immutable backups across the network — a subsequent ransomware attempt was detected and contained before encryption began.

0Files encrypted
1%Uptime kept
0Facilities
StackVelociraptorWazuh

Your environment could be next.

Every engagement above started with the same first step: an honest conversation about risk.

Start a Security Assessment