Testing and defence led by a published security researcher with six CVEs, including a CVSS 9.1 Mirai botnet kill-switch.
All security →SOC 2, ISO, CPCSC, and the Canadian privacy stack, run end to end with an independent auditor.
All frameworks →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →VCISO for Montreal founders and operators. A vCISO owns your security program: policies, controls, vendor risk, audits, board reporting, and incident leadership. You get a named executive on customer security questionnaires, regulator letters, and the cap table without a $300K+ comp package.
Montreal is Canada’s second-largest tech hub, with deep AI research (MILA, Element AI alumni, Cohere’s research roots) and a robust gaming and creative-tech sector. It’s also the only major Canadian market under Quebec Law 25, which carries fines up to $25M CAD or 4% of global revenue.
We deliver bilingually where required, and we know Law 25 inside and out: data portability windows, Section 12.1 automated-decision disclosure, breach-notification expectations from the CAI. Toronto firms that handwave Quebec compliance are why this gap exists.
A vCISO owns your security program: policies, controls, vendor risk, audits, board reporting, and incident leadership. You get a named executive on customer security questionnaires, regulator letters, and the cap table without a $300K+ comp package.
For the full service detail, see the vCISO / Fractional CISO page. For fixed-price productized engagements, see pricing.
Book a free 30-minute discovery call. We’ll tell you whether this engagement fits, what it would cost, and when we could start.
Book a call