Testing and defence led by a published security researcher with six CVEs, including a CVSS 9.1 Mirai botnet kill-switch.
All security →SOC 2, ISO, CPCSC, and the Canadian privacy stack, run end to end with an independent auditor.
All frameworks →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →Waterloo deep-tech and AI startups hit security maturity demands earlier than most. Their first enterprise customer is often the first one. Our vCISO engagement gives KW founders a defensible security program and a named CISO for customer-facing reporting, without overpaying for unused executive bandwidth.
The Kitchener-Waterloo corridor is Canada’s densest deep-tech and AI cluster, with University of Waterloo as the talent engine and a long lineage of enterprise software (BlackBerry, OpenText, D2L). Engineering bench is strong, executive bench is thinner. That’s the gap we fill.
We work with Waterloo founders the same week they ask. The drive from Toronto is 90 minutes; we run hybrid in-person engagements and pull from the same talent pool the major Waterloo employers do.
A vCISO owns your security program: policies, controls, vendor risk, audits, board reporting, and incident leadership. You get a named executive on customer security questionnaires, regulator letters, and the cap table without a $300K+ comp package.
For the full service detail, see the vCISO / Fractional CISO page. For fixed-price productized engagements, see pricing.
Book a free 30-minute discovery call. We’ll tell you whether this engagement fits, what it would cost, and when we could start.
Book a call