Manage risk, ensure compliance, and empower business
Design an exceptional, custom security program alongside our security experts.
Protect sensitive data, systems, and infrastructure
Well-designed security programs strengthen defenses, reduce risk, and prevent unauthorized access.
Security design services
Discover services to design a more effective security program.
Strategy & Roadmap Development
TrustedSec has the expertise and real-world knowledge to develop customized cybersecurity strategies and roadmaps for organizations of all sizes.
Program & Capability Development
TrustedSec has expertise and real-world knowledge in developing and implementing cybersecurity and resiliency capabilities for organizations of all sizes.
Maturity & Framework Alignment Assessment
Align your organization to cybersecurity best practices and established cybersecurity frameworks.
Policy & Procedure Development
Documented policies and procedures take the guesswork out of InfoSec and enable an organization to manage business risk through defined controls, providing a…
PCI
TrustedSec is a Qualified Security Assessor Company (QSAC) through the PCI SSC, offering services ranging from PCI Readiness Assessment to PCI SAQ Assistance…
Government Contractor Requirements (171/CMMC/FAR)
With deep experience in NIST SP 800-171 and as a CMMC Registered Practitioner Organization, TrustedSec can help you prepare to continue to contract within the…
HIPAA
Covered entities working with protected health information (PHI) need to adhere to the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
ATT&CK Assessments
Evaluate defensive controls, processes, tool-specific talent, & appropriate resources in alignment with a common enterprise adversary model—the MITRE…
Business Risk & Alignment Services
The Business Risk Assessment is an evaluation of business components, systems, threat actors, and the variables that can have a negative impact on an…
Training
Available to lead seminars on a wide range of topics, TrustedSec will work with your team to customize content and determine how to most effectively help you…
Loading...
Security expertise meets security passion
Meet the talented, security-obsessed team invested in achieving your goals.
“Weaving risk, group theory, and adaptation with business strategy is one way we stand out.”Rockie BrockwayDirector of Advisory Innovations
Rockie Brockway
Director of Advisory InnovationsRockie's focus is on helping organizations strengthen their security posture by better aligning security with business needs and requirements.
The First Steps on Your Zero Trust Journey
Find out how the NIST 800-207 framework is a starting point that demystifies Zero Trust.
Practical cybersecurity thought-leadership
Discover our experts’ innovative blogs, webinars, podcasts.
The Lost Underground
Join TrustedSec Principal Security Consultant Mike Felch for an eye-opening journey into the lost underground, where ingenuity, disobedience, and complexity…
BEC Basics: Your First Step to Thwarting Email Scams
Join Senior Security Consultant Steven Erwin and Security Consultant Caroline Fenstermacher as they cover the basics of BEC analysis, providing participants…
Discovering a Deserialization Vulnerability in LINQPad
Like most red teamers, I spend quite a lot of time looking for novel vulnerabilities that could be used for initial access or lateral movement. Recently, my…
A 5-Minute Guide to HTTP Response Codes
If you've done any network scanning or application testing, you've run into your fair share of HTTP response codes. If not, these codes will show up in most…
Navigating Compliance: FCI and CUI Requirements for Federal Contractors
TrustedSec Advisory Compliance Services Practice Lead Chris Camejo provides a comprehensive overview of the definition, scope, and protection requirements for…
Security Noise - Episode 7.6
Ghost in The Machine: Hardware Hacking w/ Rob Simon
Attacking JWT with Self-Signed Claims
JSON Web Tokens (JWTs) are a widely used format for applications and APIs to pass authorization information. These tokens often use a JSON Web Signature (JWS)…
Ask Me Anything: Mobile Security
Join our expert panel led by TrustedSec Mobile Testing Practice Lead Rob Simon, Principal Consultant Drew Kirkpatrick, and Senior Security Consultant Whitney…
EKUwu: Not just another AD CS ESC
Update November 12, 2024 - This vulnerability has been patched. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49019This post was originally…
Detecting CVE-2020-0688 Remote Code Execution Vulnerability on Microsoft Exchange Server
In February 2020, Microsoft released a patch for all versions of the Microsoft Exchange server. This patch fixes a Remote Code Execution flaw that allows an…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
