Projects
The work speaks. The clients stay private.
Banks, processors, hospitals, agencies and fast-growing software companies trust us with their most sensitive systems. We never name them. We do show what changed.
- 18
- selected engagements
- 8
- industries served
- 3
- practices, one standard of evidence
- 100%
- of clients kept confidential
Selected engagements
Outcomes on record, names off the record.
Discretion is part of the service. Each engagement below describes the sector, the scale and the result, so you can judge the work without anyone’s confidence being broken.
Practice
Industry
18 engagements
-
Dallas, Texas and Luxembourg · 20 weeks
Financial Services · 2024Messaging Security and Operational Resilience for a Custody BankA clean independent CSCF assessment and a DORA register the Luxembourg supervisor accepted on first submission.
-
Kansas City, Missouri · 16 weeks
Financial Services · 2024PCI DSS Scope Reduction for a Fleet Fuel-Card IssuerIn-scope systems cut from 780 to 214, and a Report on Compliance signed with no requirement marked Not in Place.
-
Denver, Colorado · 15 weeks
AI, Cloud & Digital Trust · 2025SOC 2 Type II for a Legal E-Discovery PlatformAn unqualified Type II report covering Security and Confidentiality, delivered before the Am Law 100 renewal cycle.
-
Seattle, Washington · 22 weeks
AI, Cloud & Digital Trust · 2026 · OngoingISO/IEC 42001 and Adversarial Testing for a Contact-Center AI ProviderVoice agents that can no longer be talked into reading back card numbers, and an AI management system heading for certification.
-
Houston, Texas · 24 weeks
AI, Cloud & Digital Trust · 2024Cloud Security Platform for a Genomics LaboratoryPetabytes of patient genomes locked behind one set of guardrails, with no slowdown in sequencing turnaround.
-
Huntsville, Alabama · 18 weeks
AI, Cloud & Digital Trust · 2025CMMC Level 2 for a Satellite Communications IntegratorEvery practice met at the C3PAO assessment, with no POA&M items carried forward.
-
Arlington, Virginia · 34 weeks
AI, Cloud & Digital Trust · 2023FedRAMP Moderate Readiness for a Public-Safety Software CompanyA 3PAO readiness review passed on the first try, and an agency authorization granted eleven months later.
-
Irving, Texas · 7 weeks
Offensive Security & Resilience · 2026Digital Ordering Penetration Test for a Restaurant FranchisorA loyalty-points fraud path worth millions closed before the national rewards relaunch.
-
Phoenix, Arizona · 18 weeks
Offensive Security & Resilience · 2025Ransomware Recovery Readiness for a Water AuthorityBilling, SCADA historians and plant engineering restored from clean copies in under 30 hours during a live drill.
-
Charlotte, North Carolina · 26 weeks
Offensive Security & Resilience · 2026 · OngoingUnified Controls and Audit Program for a Wealth-Tech Platform612 overlapping requirements folded into 148 owned controls, and one evidence cycle for four audits.
-
Nashville, Tennessee · 30 weeks
AI, Cloud & Digital Trust · 2023HITRUST r2 Certification Readiness for a Pharmacy Benefit Administratorr2 certified on the first validated assessment, keeping three health-plan contracts that required it.
-
Plano, Texas · 11 weeks
Offensive Security & Resilience · 2024Cyber Crisis and Continuity Readiness for a Mortgage ServicerBorrower payments kept posting in a simulated loss of the servicing platform, with every decision owner named in advance.
-
Atlanta, Georgia and Amsterdam · 18 weeks
AI, Cloud & Digital Trust · 2022ISO/IEC 27001 Certification for a Supply-Chain Software CompanyCertified on the first audit with zero nonconformities, major or minor.
-
Salt Lake City, Utah · 10 weeks
AI, Cloud & Digital Trust · 2025Azure and Entra ID Hardening for a Managed Hosting ProviderCross-tenant admin paths into customer environments closed, with every privileged action now approved and logged.
-
San Antonio, Texas · 14 weeks
Offensive Security & Resilience · 2024Vulnerability Management Rebuild for an Independent Broker-DealerOverdue critical vulnerabilities taken from 1,140 to 37, with advisor laptops finally inside the program.
-
Los Angeles, California · 5 weeks
Offensive Security & Resilience · 2025Mobile Security Testing for a Live-Event Ticketing AppA ticket-cloning flaw fixed three weeks before the season’s largest on-sale.
-
Minneapolis, Minnesota and Ireland · 14 weeks
Offensive Security & Resilience · 2023Privacy Program for a Connected Medical Device MakerDevice telemetry, app data and patient consent governed under one privacy program that passed hospital and EU reviews.
-
Fort Worth, Texas and the Midwest · 36 weeks
AI, Cloud & Digital Trust · 2026 · OngoingZero Trust Network Engineering for a Cold-Chain OperatorRefrigeration controls fenced off from the office network, facility by facility, with no product lost to a cutover.
No engagements match that combination yet.
Our confidentiality promise
Your name is never our marketing.
- No client names, logos or screenshotsNot on this site, not in proposals, not in conversation.
- Details changed where they could identify youSector, region and scale are described in ranges.
- References only with your permissionWhen a prospect asks to speak to a client, we ask you first.
Start your engagement
Your project could be the next one we never name.
Tell us what you are facing: an audit, a regulator, a migration or an attacker. A senior practitioner will reply within one business day.