An independent practice.

Bee-Sec was founded by practitioners who spent their careers inside security teams at banks, hospitals, and software companies. We started the firm because we wanted to do consulting work that reduces risk in a measurable way.

Engagements are run by small teams, usually two or three people. We don't subcontract and we don't resell tools. We take on a limited number of clients at a time so that our recommendations are based on your environment rather than a template.

Every engagement begins with a conversation. Before we propose anything, we want to understand what the business does, who is accountable for what, and what has already been tried.

Our deliverables are written in plain language. The same document should be useful to an engineer, a board member, and an auditor.