Skip to Main Content

David Kennedy

Founder & CEO

“Security expert, keynote speaker, avid gamer, and the go-to for protecting companies from threats.”

David is a subject matter expert in cybersecurity with over 19 years of experience, whose career has ranged from a Chief Security Officer (CSO) for a Fortune 1000 company, to testifying in front of Congress, and guest appearances on hundreds of national news and syndicated TV shows. With a mission of continuing to drive the cybersecurity industry forward and to make the world a better place, David has started several large-scale and successful cybersecurity businesses with employees all over the world.

TrustedSec and Binary Defense, David's 2 cybersecurity firms, work on a global scale to protect companies, people, and the world from hackers. TrustedSec provides InfoSec consulting services for organizations of all sizes, while Binary Defense is a leader in Managed Security Service Provider (MSSP), Managed Detection and Response (MDR), and software security that detects attackers in the early stages and prevents large-scale invasions.

Prior to creating TrustedSec and Binary Defense, David was a CSO for Diebold Incorporated, a Fortune 1000 company located in more than 80 countries with over 20,000 employees. During his tenure, he developed a global security program that tackled all aspects of InfoSec.

David is considered a forward thinker in the security field and has had the privilege of speaking at some of the nation’s largest conferences, including keynoting Microsoft’s BlueHat, DEF CON, Black Hat, DerbyCon, Grace Hopper, and a number of other widely popular conferences. In 2011, David founded DerbyCon, a large-scale InfoSec conference. David has had numerous guest appearances on Fox News, CNN, CNBC, MSNBC, Huffington Post, Bloomberg, BBC, and other high-profile media outlets, while advising for other news organizations and TV shows. In addition, his tools have been featured on several TV shows and movies, and he assisted in developing the content for the popular Mr. Robot TV show.

As the security threats faced by the public and the government have grown, David has testified in front of Congress on multiple occasions. In an effort to advance the industry, David co-authored Metasploit: The Penetration Testers Guide, which was number one on Amazon in security for over a year, and co-founded the Penetration Testing Execution Standard (PTES), which is the industry-leading standard and guidelines around how penetration tests should be performed. The methodologies in PTES have been adopted by the Payment Card Industry (PCI) Data Security Standard (DSS) Guidelines for Penetration Testing.

David is the creator of several open-source tools, including The Social-Engineer Toolkit (SET), PenTesters Framework (PTF), Artillery, and Fast-Track. David has also released security advisories, including zero-days, and focuses on security research.

Prior to the private sector, David worked in the United States Marine Corps (USMC) for cyber warfare and forensics analysis activities for the intelligence community, including 2 tours to Iraq. David also served as board of director for the ISC2 organization, which is one of the largest security collectives and offers certifications such as the CISSP.

DK Bio Logos

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

News October 30 2023

TrustedSec Announces Sponsorship for Bedford High School's Cutting-Edge Cybersecurity Education Program

TrustedSec sponsors Bedford High School's cybersecurity program, offering industry certifications, college credits, and career-ready skills, with a focus on…

Read about this article
Tools

The Social Engineering Toolkit (SET)

SET is a powerful tool for social-engineering.

Read about this article
Podcasts May 19 2026

Security Noise - Canvas On Fire: Inside the Largest Education-Sector Breach in History

Let's dive into the attack details of the Canvas ransomware incident, response strategies, and overall outlook for cybersecurity in education and beyond.…

Read about this article
Podcasts February 23 2026

Security Noise - Ten Years: A Decade of Doing This

David Kennedy and Kelsey Segrue join us to discuss ten years of our podcast! We discuss how the cybersecurity space has evolved over the years and social media…

Read about this article
Webinars February 11 2026

Perspectives on AI in the Cybersecurity Industry in 2026

Join us for this exclusive webinar where our experts will decode the complex relationship between artificial intelligence and cybersecurity in 2026. What will…

Read about this article
Podcasts September 22 2025

Security Noise - Can You Wear a White Hat After Labor Day?

Episode 8.2

Read about this article
Blog April 16 2025

TrustedSec Achieves CREST Certification

TrustedSec has achieved CREST Certification for penetration testing, a globally recognized standard that verifies an organization's ability to conduct…

Read about this article
Blog March 21 2025

Trimarc Joins TrustedSec: Strengthening Our Commitment to Security

Play We’re excited to share some big news: Trimarc Security is now fully operating under TrustedSec! This marks a significant step forward in our mission to…

Read about this article
Blog July 09 2024

HackingDave’s Rule of Five

Implementing the Rule of Five helps you prioritize tasks that align with your long-term goals, cutting through everyday distractions and fostering personal…

Read about this article
Podcasts April 26 2024

Security Noise - Episode 6.19

InfoSec: Cybersecurity Education at Bedford High

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.