Most security problems are not in the technology, but between the parties that have to make it work together.
What drives us
In search of the reality behind the question.
Cybersecurity rarely stalls on insight. The risks are often known, the measures usually too. But the moment the board, IT, architecture, compliance, vendors and operations no longer work from the same reality, execution stalls. That is where our work begins.
We are independent and diagnostic. We bring no frameworks and no products, but people who know it from the inside: more than twenty years in complex enterprise environments, including ABN AMRO, Shell, KLM, T-Mobile, Amsterdam UMC, Enexis and Essent.
Four convictions that steer every engagement.
Not values on the wall, but principles you can hold us to, in every conversation and every intervention.
Independence
No stake in a tool or platform. The advice follows from your situation and your risk, not from a vendor catalogue.
Seniority
We work only with seniors. Whoever takes it over has done it themselves. No juniors learning on your problem.
Capability-first, not tooling-first
We think in capabilities, business services, governance and dependencies. The question is not which tool is missing, but which capability must function reliably.
Handover over dependency
We leave your situation stronger than we found it. The goal is that you can do it yourself, not that you keep needing us.
You work directly with architects who are also hands-on in execution.
Board, market and delivery. No account layer in between.
Hans Raaijmakers
Brought in when security stops being a technical question and becomes a board-level one. Connects policy, risk and execution, and makes complex situations governable. Sets up organisations to steer, decide and account for themselves.
Rasham Rastegarpour
Operates where technology meets the market. Knows how solutions are positioned and where commercial interests lie, and brings independent insight when technology choices affect risk, direction and investment.
Lorenzo Alberga
Turns strategy and architecture into working technology: choices that hold up not only on paper but in practice. Moves between infrastructure, applications and data, where reliability and scale come together.
Our experience comes from environments where the stakes are high.
Finance, energy, industry and public sector. Places where a wrong choice counts immediately, and where assurance is no formality.
Years in complex, vulnerable security landscapes.
Finance, energy, telecom, infrastructure and public sector.
No vendor interest in the advice or the choice.
We only leave once it stands and runs, and you can carry on yourself.
Build it yourself, reinforce temporarily or stay embedded for the long term. You set the level. The knowledge always stays in your organisation.
Next step
A conversation says more than a page.
Thirty minutes with an architect. No pitch, no obligation. We look at your situation first.
Schedule a conversation