Skip to content
Bulwark Black Bulwark Black LLC
Latest
StopAndProtect Shows Why WordPress Sites Are Attack InfrastructureMacSync Stealer Shows Why Behavioral Pivots Beat Rotating DomainsPurpleDelta Shows Why Remote Hiring Is Now an Insider-Risk ControlGitLab GraphQL Flaw Shows Why DevSecOps Platforms Need Emergency Patch RunbooksForminator RCE Shows Why WordPress Plugin Risk Needs Runtime ControlsC2Looper Shows Why GitHub-Based C2 Belongs in Ransomware TriageVMware vCenter Exploitation Shows Why Patching Is Not Incident ClosureRansomware’s Long Tail Means Defenders Need Faster TriageAzure Directory Dumps Show Why Identity Data Is Attack InfrastructureSigned ClickOnce Shows Fake Interviews Are Now a Credential-Theft Delivery SystemDropcatch Domains Show Why Reputation Is Not TrustCaptiveCrunch Shows Why Travel Wi-Fi Is an Identity Attack SurfaceHoneyMyte’s CoolClient Rootkit Shows Why Kernel Visibility MattersJWR Phishing Framework Shows Why MFA Codes Are Now Live Targets

How I Work

Fundamentals first. AI where it earns its keep.

Most breaches do not require novel zero-days. They require missed fundamentals. My methodology is built around closing those gaps before anything fancy.

Method

Four phases. No fluff.

  1. 01

    Discover

    I map your assets, your data flows, and your real exposure. No assumptions. I use what you already have before recommending anything new.

  2. 02

    Stabilize

    I close the obvious gaps first: patching, MFA, backups, segmentation, monitoring. Most incidents stop here.

  3. 03

    Engineer

    I design the long-term architecture: detection telemetry, identity, OT/IT segmentation, and automation. Built for your team, not for mine.

  4. 04

    Operate

    I run it with you, train your operators, and hand it off when you're ready. I stay reachable when you need me.

What I will not do

Honest constraints.

  • · I will not sell you AI you do not need.
  • · I will not take on a project I cannot resource correctly.
  • · I will not bypass safety checks to hit a deadline.
  • · I will not mark a gap "closed" without telemetry that proves it.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.