Contact a security practitioner

Not an emergency service

We don't provide emergency incident response. If you're dealing with an active incident, contact your cyber insurer's breach hotline, your legal counsel, or law enforcement.

Public resources: report an incident to CISA or file a complaint with the FBI’s Internet Crime Complaint Center (IC3).

Send an inquiry

All fields are required unless marked optional. Nothing you type in the contact form is sent to or stored on our servers until you press Send.

Full name

Work email

Use the address you’d like us to reply to.

Company or organization

What would you like to talk about?

Before you write your message

Do not send passwords, authentication codes, payment-card data, health information, controlled information, exploit material, or assessment evidence through this form. If sensitive material becomes necessary, we will agree an appropriate transfer method before you send it.

Message

What do you need help with, and what’s driving it (a customer request, an audit date, a new requirement)? At least 20 characters.

0 of 4,000 characters

Add optional details (job title, organization size)

Job title (optional)

Organization size (optional)

Email me occasional practical guidance

Optional. Leaving this unchecked doesn't affect your inquiry, and every email includes a way to unsubscribe.

Sending this form confirms that you've read our privacy notice, which explains how we use and keep inquiry information. Read the privacy notice (version 2026-09-27).

What happens next

We respond to new inquiries Monday to Friday, 8:00 a.m. to 6:00 p.m. Central Time, excluding U.S. federal holidays. Best-effort triage. No emergency service level.
A member of our team reads each inquiry and replies by email. If the work looks like a fit, we'll suggest a short call to talk through your scope.
Every engagement begins with a written scope and proposal.

Who we work with

We work with U.S.-based organizations in all 50 states and Washington, D.C. We don't accept international engagements.

Security reports and privacy requests

Every inquiry starts with the contact form on this website, including security vulnerability reports and privacy requests. We don't publish an email address, phone number, or postal address.

Report a security vulnerability with this form under our responsible disclosure policy.
Make a privacy request with this form as described in our privacy notice.