Skip to content
Bulwark BlackBulwark Black LLC
Latest
JetBrains IDE Flaws Show Why Developer Workstations Need Trust BoundariesFileless PHP Rootkit Shows Why BIG-IP Incidents Need Process-Level HuntingOWAReaper Shows Why Exchange Mailboxes Need Post-Patch Compromise ReviewApache Ant Path Traversal Shows Why Build Pipelines Need SandboxesTeams Helpdesk Impersonation Shows Why Remote Support Needs GuardrailsPaperCut RCE Shows Why Print Servers Need Compromise ReviewEdge AI Moves the Trust Boundary Into Customer-Owned EnvironmentsToy Ghouls Shows Why Custom C2 Needs Protocol-Aware MonitoringTed Backdoor Shows Why Edge Load Balancers Need Compromise ReviewNisos DPRK Investigation Shows Why Remote Hiring Is a Security ControlFake Claude Opus 5 App Shows Why AI Tooling Needs Software ControlNodeRabbit and PollCat Show Why Developer Workstations Need Recruiting-Lure ControlsJSCeal Shows Why Compiled Script Malware Needs Bytecode-Aware DefenseWatershed 250 Shows Water Cybersecurity Needs Practical Field Tests

How I Work

Fundamentals first. AI where it earns its keep.

Most breaches do not require novel zero-days. They require missed fundamentals. My methodology is built around closing those gaps before anything fancy.

Method

Four phases. No fluff.

  1. 01

    Discover

    I map your assets, your data flows, and your real exposure. No assumptions. I use what you already have before recommending anything new.

  2. 02

    Stabilize

    I close the obvious gaps first: patching, MFA, backups, segmentation, monitoring. Most incidents stop here.

  3. 03

    Engineer

    I design the long-term architecture: detection telemetry, identity, OT/IT segmentation, and automation. Built for your team, not for mine.

  4. 04

    Operate

    I run it with you, train your operators, and hand it off when you're ready. I stay reachable when you need me.

What I will not do

Honest constraints.

  • · I will not sell you AI you do not need.
  • · I will not take on a project I cannot resource correctly.
  • · I will not bypass safety checks to hit a deadline.
  • · I will not mark a gap "closed" without telemetry that proves it.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.