Security advice from someone who’s been on both sides of it
Before starting Attacker Mindset, I spent years on both sides of security consultancy — performing penetration tests and, as a buyer, commissioning them.
That experience made one thing clear: most security advice fails not because the findings are wrong, but because they’re disconnected from the business receiving them. A technically correct recommendation that’s too expensive to implement, too disruptive to maintain, or incompatible with how a team actually works doesn’t get implemented. It sits in a report while the risk remains.
That’s why I started Attacker Mindset.
I do the work upfront to understand how your business operates, what you’re trying to achieve, and where you’re headed — so that the advice I give you is grounded in your reality, not a theoretical version of it. Clear priorities. Realistic actions. A short list of things that will actually get done.
Whether your business is growing, responding to new compliance demands, or rethinking how your technology works, I help you build security that fits where you are — and moves with you.