Testing and defence led by a published security researcher with six CVEs, including a CVSS 9.1 Mirai botnet kill-switch.
All security →SOC 2, ISO, CPCSC, and the Canadian privacy stack, run end to end with an independent auditor.
All frameworks →A customer, an investor, or a renewal wants proof your security holds up. We get you audit-ready: SOC 2, ISO 27001, penetration testing, and security leadership.
Readiness and audit prep, run end to end. We are the prep expert, not the auditor: an independent CPA firm signs the report, we do everything before it.
Web app, network, cloud, and server hardening tests, vulnerability scanning, and a TRA document when procurement asks for one.
Senior security leadership on your security questionnaires, SOC 2 evidence, and board deck. Without the $300K comp line.
Prompt injection, RAG leakage, and agent abuse testing across the OWASP LLM Top 10. Delivered with our offensive-security partner.
A named team, a contracted SLA, and someone who actually answers the phone at 2 AM, for a fraction of building an internal SOC.
Level 1 self-assessment and control-by-control prep for Canadian defence suppliers. No certification, no bid.
PHI safeguards, risk analysis, and the policies US healthcare buyers and payers expect. Run alongside SOC 2 so you build the evidence once.
Scope reduction first, then the readiness and testing your acquirer or enterprise customer requires. We minimize what you have to secure.
We work with SaaS, fintech, healthcare, AI, and more, from startups to enterprise. See who we help →
traztech is led by Jacob Masse, a published security researcher who both finds the attacks and ships the compliance. You work with him directly, not an account manager or a handoff to juniors.
See the researchIncluding CVE-2024-45163 (CVSS 9.1), the flaw in the Mirai botnet that let defenders shut down active command-and-control servers.
Stood up a full program across 76 controls and coordinated the external pentest through to attestation.
Founded AttackEngine, an anti-DDoS platform acquired within a year of launch.
Across pentesting, infrastructure hardening, and compliance for startups in North America.
Owned the full program: 76 controls, a five-layer change-approval flow, and a 60+ asset security audit across a team of 15. They passed.
Built automated reminders, pre-call confirmations, and follow-up sequences that transformed client engagement.
Designed multi-stage outreach with escalation logic and centralized tracking to systematize debt recovery.
Built to 250 customers and $13K MRR in under three months, then wound down cleanly on purpose.
“He exhibits natural leadership, professionalism, and technical skill. His ability to tackle problems...is truly impressive.”
“He keeps things moving and handles both the technical and operational sides without overcomplicating things.”
“One of the most competent individuals I have worked with. His technical skills and management styles are extremely efficient.”
“Proficient in PHP, MySQL, CloudOps, and DevOps Pipelines. He has helped us out many times and always comes through.”
No long discovery phases. No 80-page strategy docs. We get in, understand the problem, and start fixing it.
30 minutes. We learn your stack, team, and biggest pain point. You learn if we are the right fit.
Within 48 hours you get a clear proposal: what we will do, how long it takes, and what it costs. No surprises.
We join your Slack, your standups, your repo. We ship real work from week one. You see progress daily.
Monthly reviews with clear metrics. We adjust scope as your needs change. No lock-in contracts.
Not email threads and shared spreadsheets. Track findings by severity, respond to evidence requests, e-sign documents, and watch milestones close in real time. For small and mid-size readiness work, it replaces the client-facing side of Vanta or Drata, without the platform price tag.
Every finding ranked by severity, with recommended remediation and a target date. Watch your open-critical count fall to zero.
A live checklist of what we need for the audit. Upload directly against each item, see what is still outstanding at a glance.
Proposals, agreements, and deliverables in one place, versioned and downloadable. No more hunting through your inbox.
A live timeline of the engagement so you always know what is done, what is in progress, and what is next.
Review and sign agreements and policies right in the portal, with a legally binding electronic signature. No third-party tool.
See what is due, pay by card or bank transfer, and pull your full payment history whenever finance asks.
To be precise: this is an engagement and evidence portal, where your project with us lives. It is not an automated, continuous control-monitoring scanner.
Book a free 30-minute strategy call. We will dig into your stack, your team, and your biggest bottleneck.
Book a free consultation