Skip to content
Bulwark BlackBulwark Black LLC
Latest
Chainalysis Breach: Recover the Tokens, Verify the Screening BacklogD-Link DDP Flaws: Disable Discovery, Keep the Firmware Review OpenStolen App Secrets: Recover the Cloud Access Behind the CredentialCold-Chain Cyberattacks: Protect the Temperature, Not Just the DashboardOpenSSH on musl: Patch the Server, Verify Key-Only Accounts Stay Key-OnlyCWPdoor: Check the Management Server, Not Just Its Access LogsGhostMap Android Crash Loop: Prepare for Phone Loss Before the App RunsExploited CVEs: Prioritize the Reachable Path to Privileged Access3AM Ransomware: Keep Backup Authority Outside the Domain Blast RadiusNIKKE Launcher Compromise: Recover the Workstation, Not Just the GameAPT29-Linked Mobile Watering Holes: Patch the Phone, Recover the SessionsVAPOR PANDA’s ARTEX Campaign: Close the Trust Gaps Behind Parallel IntrusionsVOLTA Infostealer: Recover the Access Behind the AI-Ranked DossierHelp-Desk Vishing: Verify the Caller Before Opening Remote Access

How I Work

Fundamentals first. AI where it earns its keep.

Most breaches do not require novel zero-days. They require missed fundamentals. My methodology is built around closing those gaps before anything fancy.

Method

Four phases. No fluff.

  1. 01

    Discover

    I map your assets, your data flows, and your real exposure. No assumptions. I use what you already have before recommending anything new.

  2. 02

    Stabilize

    I close the obvious gaps first: patching, MFA, backups, segmentation, monitoring. Most incidents stop here.

  3. 03

    Engineer

    I design the long-term architecture: detection telemetry, identity, OT/IT segmentation, and automation. Built for your team, not for mine.

  4. 04

    Operate

    I run it with you, train your operators, and hand it off when you're ready. I stay reachable when you need me.

What I will not do

Honest constraints.

  • · I will not sell you AI you do not need.
  • · I will not take on a project I cannot resource correctly.
  • · I will not bypass safety checks to hit a deadline.
  • · I will not mark a gap "closed" without telemetry that proves it.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.