Your security partner for good
Secure what's most important to your business with our expertise, technical skill, and ethical character.
Making Waves in Cybersecurity Consulting Services
TrustedSec Named a Leader in The Forrester Wave™: Cybersecurity Consulting Services, Q2 2024
Fundamentally different cybersecurity
We transform cybersecurity into an asset rather than an obstacle, setting you up for success.
Explore trend-setting cybersecurity resources
Discover the blogs, analysis, webinars, and podcasts the industry is talking about.
Ask Me Anything: Exploring Assumed Breach Strategies for Cyber Resilience
As organizations face increasingly unique cyber threats, the assumption that breaches will occur is becoming a foundational principle of building a more…
JS-Tap Mark II: Now with C2 Shenanigans
JS-Tap is a tool intended to help red teams attack web applications. I recently blogged about the data collection capabilities in JS-Tap version 1.0, and data…
Introducing Meta-Detector
In this blog post, I’m going to discuss a new Open-Source Intelligence (OSINT) tool I created to assist with collecting information about target organizations…
Security Noise - Episode 6.20
Targets Operations, Co-Pwnership
Most Reported Web Findings of 2023
I reviewed the findings from the application and API assessments that the TrustedSec Software Security Team conducted during 2023 to see what issues we were…
Preparing for NIST CSF 2.0: Practical Tips for Implementation
TrustedSec’s Senior Security Consultant Jared McWherter and Advisory Solutions Director Alex Hamerstone provide actionable advice for aligning your…
XZ Utils Made Me Paranoid
On March 28, 2024, the news about the XZ Utils backdoor came out. Since then, I’ve been thinking about how we could identify these backdoors before packages…
The Midnight Alert: Navigating the Dark Web Data Dilemma
In the dead of night, an ominous message hits your inbox: "Your company's sensitive data is for sale on the dark web." As the Chief Information Security…
Full Disclosure: A Look at a Recently Patched Microsoft Graph Logging Bypass - GraphNinja
From June 2023 to March 2024, Microsoft Graph was vulnerable to a logging bypass that allowed attackers to perform password-spray attacks undetected. During…
Security Noise - Episode 6.19
InfoSec: Cybersecurity Education at Bedford High
Unleash the power of the Impede Detection Platform
The Impede Detection Platform revolutionizes the way businesses handle detection engineering. Learn how this solution fortifies defenses against an ever-evolving threat landscape.
7.4K
Custom security engagements completed
52
Open-source tools available to public
207
Team industry certifications
92%
Net Promoter Score
We understand security challenges
Drawing from real-world experience, our solutions deliver practical results that help security teams. Our custom services are tailored to address the unique challenges of different roles in security. From building to testing to hardening, our services support security at every stage.
Born to prove security can be better
Founded by innovator David Kennedy in 2012, our purpose-driven approach has enabled us to grow into a name trusted by government entities, Fortune 500s, and hackers alike. With our expertise, technical skills, and ethical character, we help you secure what's important and achieve what matters.
Our experts
We set out to change security by assembling the most technically advanced team of consultants and advisors.
“Our work provides immediate, practical, & tangible benefits for our clients. We absolutely want them to succeed & be more secure. That makes me proud to work here & turns our clients into partners.”Mike OwensSenior Security Consultant
Mike Owens
Senior Security ConsultantMike helps clients implement practical, systematic improvements in their security programs to solve problems before they result in security incidents. Recent focus areas include hardening public cloud environments, securing backups against ransomware, guiding adoption of core security controls frameworks, and custom, hands-on services to support unique client needs.
“Our product-agnostic approach enables us to give a truly unbiased evaluation.”Steph SaundersSenior Security Consultant
Steph Saunders
Senior Security ConsultantSteph performs a variety of security assessments from Incident Response to Compliance. She is passionate about helping communities and companies mature in cybersecurity and utilize best practices.
“Having access to industry leaders right here at TrustedSec makes solving our clients' challenges easier.”Paul SemsManaging Director of Remediation Services
Paul Sems
Managing Director of Remediation ServicesPaul and his team work with clients to harden their environments against attacks and help them recover after security incidents.
Official Cybersecurity Provider for the Cleveland Cavaliers
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
Trusted by top security teams around the world