David D.

Attackers already know more about your company than you do. I find it first, then help you fix it and prove it to your auditors. Years of formal intelligence training, put to work for your business. I trained as an intelligence professional in the U.S. Air Force, in a special operations environment where a wrong answer had real consequences. Tradecraft, source validation, and analytic methods, practiced ever since. My background: - 18 years of open-source intelligence (OSINT) work - 10 years leading a corporate internet research team producing due diligence and market intelligence for decision-makers - U.S. Air Force veteran, intel with a special operations background - 10 years on Upwork with dozens of five-star reviews, securing, monitoring, building, and maintaining websites and apps, so I know exactly where they break and how they get attacked - CTO and co-founder of a veteran-owned cybersecurity firm that builds CMMC-compliant cloud environments for defense contractors Research and intelligence: - Company and executive exposure reviews: leaked data, exposed staff details, and anything an attacker could use against you - Digital footprint and attack surface mapping across DNS, certificate records, breach data, job postings, and document metadata - Social media intelligence (SOCMINT) and entity and network profiling using link analysis and source correlation - Business intelligence and due diligence on companies, vendors, and markets - Phishing and social engineering risk checks Security and compliance: - Website security checkups: plugin and software risks, SSL, security headers, login protection, and hidden data in posted files - Email spoofing protection: SPF, DKIM, and DMARC set up and checked - CMMC Level 1 and Level 2 readiness, NIST 800-171 gap reviews, and SSP support - Microsoft GCC High and Azure Government guidance for handling CUI Every finding is validated and sourced, so you can check it yourself. What past clients say: "David is super knowledgeable about Wordpress and IT. I had a wonderful experience working with him and highly recommend to others." How I work: 1. Short call to understand what you need and what's off-limits 2. Fixed scope and price agreed up front 3. Research and analysis 4. Written report with findings ranked by risk and a clear fix list 5. Follow-up call to walk through it Plain-English reports. Confidential by default. Your findings stay yours. I only take work for businesses, their own people with consent, or licensed investigators and attorneys. I don't locate private individuals. Send me a message with what you're worried about. I'll tell you honestly whether I can help and what it would take.