CyberDunc LLC gives you the security, risk and compliance judgment of a full-time CISO without the full-time hire — and when the answer is “you need to build something,” we build that too: the website, the application, the AI system, done securely the first time.
Who we work with
You need the security decisions made well, once, by someone who will not sell you a stack you cannot run.
Accounts locked down, devices cleaned up, and someone to call when something looks wrong. No judgment.
Most firms stop at the recommendation. Open any line to see exactly what lands on your desk.
What you get
What you get
What you get
What you get
The free call
Thirty minutes. You describe the business and what is keeping you up; I listen for what would actually hurt if it broke. If you need something I do not do, I say so and point you somewhere better.
A written scope
One page: what I will look at, what I will not, the fixed price, the dates, and what access I need. Nothing starts until you approve it.
The work, in the open
Short updates as I go — not a black box that produces a report in six weeks. Anything urgent reaches you the hour I find it, by phone.
Findings you can hand over
Ranked by real business risk, each with the fix, the effort it takes and who should own it. Written for your team and your clients, not for an auditor’s shelf.
A check back
Ninety days later I re-check what was fixed, at no charge. Closing the loop is part of the job, not the next invoice.
Founder & Principal · CISSP, CCSK
I have spent [X] years doing governance, risk and compliance work — the part of security where somebody has to decide what actually matters, write it down, and defend it to an auditor. [One line on where: the industry, the branch, the agency.]
CyberDunc exists because of a gap I got tired of watching. That judgment was always available to whoever could afford a CISO, and the people who needed it most — a twelve-person contractor, a family business, a parent whose accounts had been drained — got a checklist and a shrug. [Add the specific moment that decided it: the client, the incident, the conversation.]
So the practice is built the way I would want it aimed at me. One accountable person. Plain language. Fixed prices. Nothing I get paid to recommend. And when the right answer is to build something — a site, an application, an AI workflow — I build it rather than handing you a vendor list. If I am not the right fit, I will say so on the first call and point you somewhere better.
Governance and cloud security credentials that require real experience to earn and continuing education to keep.
Findings are encrypted, shared only with the people you name, and destroyed on request when the engagement closes.
A mutual NDA and a written scope on every project — the systems in play, the dates, the fixed price, the stop conditions.
Month to month, cancel any time, no reseller commissions. Everything we build is documented so anyone can pick it up.
Tell me roughly what is going on. You will hear back within one business day with times and, if it is useful, what to have handy for the call. No obligation, no pitch deck.
Ask the thing you are not sure is worth asking. “Is this email a scam?” “Do we need this framework?” “Can you look at this quote?” Short questions get short, honest answers, free.
If you are in the middle of an incident right now, call (555) 010-2400 instead — and do not wipe or reboot anything until we have talked.