Projects
The work speaks. The clients stay private.
Banks, processors, hospitals, agencies and fast-growing software companies trust us with their most sensitive systems. We never name them. We do show what changed.
- 18
- selected engagements
- 8
- industries served
- 3
- practices, one standard of evidence
- 100%
- of clients kept confidential
Selected engagements
Outcomes on record, names off the record.
Discretion is part of the service. Each engagement below describes the sector, the scale and the result, so you can judge the work without anyone’s confidence being broken.
Practice
Industry
18 engagements
-
Jersey City, New Jersey and Dublin, Ireland · 18 weeks
Financial Services · 2025SWIFT CSCF and a DORA Register of Information Built in ServiceNow for a Transaction BankA DORA register generated straight from ServiceNow vendor records and filed on time, plus an independent CSCF assessment with no open findings.
-
Philadelphia, Pennsylvania · 14 weeks
Financial Services · 2025PCI DSS Service Provider Assessment for a Property-Management Payment FacilitatorA first Level 1 service provider Report on Compliance, with every future-dated 4.0.1 requirement in place on the day enforcement began.
-
Boston, Massachusetts · 16 weeks
AI, Cloud & Digital Trust · 2024SOC 2 Type II with Evidence Built into ServiceNow Change RecordsAn unqualified Type II report with zero exceptions, and change-management evidence that now collects itself.
-
New York, New York · 20 weeks
AI, Cloud & Digital Trust · 2026 · OngoingISO/IEC 42001 and Adversarial Testing for a Commercial Underwriting AI PlatformDoctored broker submissions no longer steer risk rankings, and an AI management system is on track for its certification audit.
-
Pittsburgh, Pennsylvania · 22 weeks
AI, Cloud & Digital Trust · 2025Multi-Cloud Security Guardrails for a Regional Health SystemClinical imaging and analytics in two clouds under one set of guardrails, with no change to how radiologists read studies.
-
Cleveland, Ohio · 22 weeks
AI, Cloud & Digital Trust · 2025CMMC Level 2 Certification for a Precision Machining SupplierCertified at the C3PAO assessment, keeping the supplier on two prime contractors’ approved lists.
-
Rockville, Maryland · 36 weeks
AI, Cloud & Digital Trust · 2024FedRAMP Moderate with ServiceNow Continuous Monitoring for a Grants PlatformAn agency authorization, and monthly continuous monitoring packages that take two days to assemble instead of two weeks.
-
Edison, New Jersey · 6 weeks
Offensive Security & Resilience · 2025Online Ordering and Pickup Penetration Test for a Regional Grocery ChainA flaw that exposed any shopper’s order history and saved address, closed before the holiday ordering peak.
-
Albany, New York · 16 weeks
Offensive Security & Resilience · 2024Ransomware Resilience for a Gas and Electric Distribution UtilityIdentity, outage management and billing rebuilt from clean infrastructure in 19 hours during a full-scale exercise.
-
Stamford, Connecticut · 28 weeks
Offensive Security & Resilience · 2026 · OngoingUnified Controls in ServiceNow IRM for a Payroll and Earned-Wage Platform537 requirements reduced to 126 controls in ServiceNow IRM, with 61% of control tests now running automatically.
-
Raleigh, North Carolina · 20 weeks
AI, Cloud & Digital Trust · 2023HITRUST i1 Certification for a Behavioral Telehealth Networki1 certified on the first validated assessment, inside the deadline set by its two largest payer contracts.
-
Hartford, Connecticut · 13 weeks
Offensive Security & Resilience · 2024Cyber Continuity and Enterprise Risk for a Mutual Property InsurerClaims kept moving through a simulated ransomware attack during a hurricane surge, and cyber risk now reports to the board against a stated appetite.
-
Princeton, New Jersey · 20 weeks
AI, Cloud & Digital Trust · 2023ISO/IEC 27001 and 27701 Built into Agile Delivery for a Field Service Software CompanyCertified to both standards with no nonconformities, and security controls now ship as part of the definition of done.
-
Columbus, Ohio · 12 weeks
AI, Cloud & Digital Trust · 2026Azure Tenant Isolation and Privileged Access for a Cloud Data PlatformEvery cross-customer data path closed, and support engineers reach customer workspaces only through time-limited, approved access.
-
Allentown, Pennsylvania · 14 weeks
Offensive Security & Resilience · 2026 · OngoingVulnerability Response in ServiceNow for a Member-Owned Credit UnionEvery critical vulnerability now has an owner from the CMDB and a fix scheduled through change control, and the overdue backlog is down 88%.
-
Seattle, Washington · 6 weeks
Offensive Security & Resilience · 2024Mobile Security Testing for a Specialty Retailer’s Shopping and Wallet AppA deep-link flaw that could move stored-value balances between members, fixed before the wallet launched.
-
Bridgewater, New Jersey and Frankfurt, Germany · 16 weeks
Offensive Security & Resilience · 2023Global Privacy Program for a Clinical Research OrganizationParticipant data from 140 trials governed under one privacy program, with transfer assessments that sponsors and EU ethics committees accepted.
-
Elizabeth, New Jersey and Charleston, South Carolina · 32 weeks
AI, Cloud & Digital Trust · 2026 · OngoingOT Segmentation and Secure Cloud Connectivity for a Container Terminal OperatorCrane and gate control separated from the business network, terminal by terminal, without a single missed vessel window.
No engagements match that combination yet.
Our confidentiality promise
Your name is never our marketing.
- No client names, logos or screenshotsNot on this site, not in proposals, not in conversation.
- Details changed where they could identify youSector, region and scale are described in ranges.
- References only with your permissionWhen a prospect asks to speak to a client, we ask you first.
Start your engagement
Your project could be the next one we never name.
Tell us what you are facing: an audit, a regulator, a migration or an attacker. A senior practitioner will reply within one business day.