02 Advisory Services
Built on 15 years of
doing the work.
Training and advisory rooted in active offensive security practice. If it doesn't hold up on a real engagement, it doesn't end up in the work.
02 Advisory Services
Training and advisory rooted in active offensive security practice. If it doesn't hold up on a real engagement, it doesn't end up in the work.
01 What I do
Full curriculum design and delivery, from concept to self-hosted lab environment. Every module maps to real adversary technique, not checkbox compliance. Built for offensive practitioners, internal red teams, and defenders who want to understand the other side.
Strategic support for security teams and leadership - scoping red team programmes, making sense of findings, or navigating regulatory frameworks like DORA and TIBER-EU. Advice grounded in operational reality, not just frameworks on paper.
End-to-end design of realistic attack scenarios and lab environments for training platforms, CTFs, or internal exercises. Attack chains, adversarial infrastructure, and bespoke tooling that reflects how threat actors actually operate.
02 How engagements run
Understand the objective, the estate, and the constraints - what "good" looks like for you.
Build the plan: attack chains, curriculum, or lab architecture tailored to the goal.
Execute - hands-on build, delivery, or advisory alongside your team.
Leave you with the knowledge, tooling, and documentation to run it yourselves.
Have a project in mind? advisory[at]zsec[dot]red