Senior security leadership for startups and growing companies — without a full-time CISO. Security governance, SOC 2 readiness and the AI tools your team already uses, managed as one program and scoped to where you are now.
Most clients start with one and grow into another. Every engagement is scoped to your size, budget and deadline — not a template.
Security leadership a few days a month — for when questionnaires, board questions or investor diligence start landing and nobody owns security.
From gap assessment to audit-ready, with controls that make business sense for a company your size — not a 200-page binder.
Let your team use AI tools and agents without creating a new class of risk — guidance from a practitioner who governs AI in production, not just on paper.
New tools, new data flows, new vendors and new ways for things to go wrong. I’m a security leader first, and I bring AI into your program the same way I’d bring in any other system: deliberately, with the controls it actually needs.
Every AI control rests on the fundamentals: identity, data handling, vendor risk and incident response. Get those right and AI governance has something to stand on.
Copilots, agents, connectors and models get the same rigor as any other system: an inventory, an approval path, monitoring and an owner.
One roadmap, one risk register, one person accountable. AI risk lives inside your security program, not in a separate committee beside it.
Same shape whether it’s a SOC 2 project or an ongoing vCISO role. You always know what’s next and why.
A short, fixed-length discovery: interviews, a review of what you already have, and a clear read on your real risks and obligations.
A prioritized roadmap: what to do now, what can wait, and what you can skip entirely. Every item tied to a business reason.
Hands-on execution alongside your team, with reporting your board, customers and auditors can actually use.
Founder & Principal. 20+ years in technology, with deep experience in security governance, compliance and AI risk. Matt co-founded Aware, a collaboration security company, and took it from startup to acquisition in 2024 — so he builds security programs the way founders need them: in step with the business, never in its way.
You work with Matt directly. No hand-off to junior staff after the sales call.
In golf, a shot that finishes pin high has the distance exactly right — not short, not long. That’s the job here: security, IT and AI programs sized correctly for where you are today, with room to grow.
Until security is a full-time job at your company, a fractional leader gives you the same strategic judgment at a fraction of the cost — and scales up or down as you grow.
No cookie-cutter frameworks and no over-engineering. You get practical governance and controls that fit your actual needs and budget, from someone who understands how startups and SMBs operate.
Yes. From the initial gap assessment through audit readiness, with cost-effective controls that make business sense.
That’s common. Choosing a tech stack, standing up asset management, or just a second opinion on best practices — flexible, project-based support works too.
A 30-minute call. You’ll leave with a clear read on your biggest gaps — whether or not we work together.