December 2025 Site Notes

I moved from Philadelphia to Alexandria, Virginia. Being closer to DC puts me nearer to the security and federal community, though plenty of the work still happens through remote calls, document review, and research.

I've also been cleaning up the site so it's clearer what I work on and what happens to information people send me.

Device reviews

As of December 2025, I'm taking on defensive device reviews for executives and people facing elevated targeting risk. That can include checking phones, laptops, and network equipment for suspicious configuration or signs of tampering, reviewing account hardening, and preparing clean travel devices.

The scope needs to be settled before the work starts. I require written authorization for the accounts and equipment being reviewed. I don't take requests to examine someone else's private activity.

Privacy and security pages

The privacy policy now explains the contact form and security logging more clearly. The security page covers vulnerability reporting and the behavior of tools that run locally in the browser.

I wanted those details to be easy to find before someone sends a message or puts data into a tool.

Writing

I want to publish more of the work behind the finished result: a detection that needed another iteration, a tool that solved one small problem, or a research approach that didn't pan out.

Threat research, detection engineering, ransomware economics, and AI safety boundaries are still the subjects I'm most interested in writing about. There should be room here for the unfinished work too, as long as there's something useful to show from it.