Scope before sell
Every engagement starts with written scope, rules of engagement and a named deliverable set. You know what arrives and when before any work begins.
Arcnox — Cybersecurity services
Assume breach.
Assume breach.
Prove resilience.
Offensive testing, defensible controls and security leadership for organisations that have to show their work — to a board, an auditor or a regulator.
- Certifications held
- CISSP · ISO 27001 · ISO 22301
- Frameworks worked with
- ISO 27001, ISO 22301, SOC 2, SWIFT CSCF, NIST CSF
- Testing methodologies
- OWASP · PTES · NIST 800-115
- Experience
- 12 Years in practice
Penetration testingSecurity strategyISO 27001 / SOC 2Virtual CISOCyber risk management
01
Five ways we reduce your security and compliance risk
Whether you need to know where your systems are exposed, build a security program from the ground up, pass an audit, or simply have someone accountable for the whole picture — we have a service built for that exact problem.
01Ingress
Penetration Testing & Adversary Simulation
Find the way in before someone else does.
Technical findings report with severity ranking
Read the page02Attest
Compliance Assessment & Implementation
Compliance you can defend under audit, not just on paper.
Framework gap assessment and control mapping
Read the page03Northline
Cybersecurity Strategic Advisory & Operating Model
A security strategy that survives contact with the budget cycle.
Prioritized roadmap with named owners
Read the page04Helm
Virtual CISO
Executive security leadership, without the full-time headcount.
Board and executive reporting, with named accountability
Read the page05Compass
IT & Cyber Risk Management Consulting
Know which risks actually deserve your budget.
Risk register build and maintenance
Read the page02
How we work
Evidence over adjectives
Findings are stated with the method that produced them, the severity basis used, and what an attacker or auditor would do with them.
Two audiences, one report
A technical findings report your engineers can action, and an executive summary your board can read without translation.
Accountable afterwards
Retests, control implementation support and quarterly review cadence, so the work does not end at the report.
ARCNOX
Tell us what you need to prove, and to whom.
A consultation is a scoping conversation, not a sales call: we establish the problem, the audience for the evidence, and which of the five services fits.
Book a consultation