A straight answer on your security, from someone who has delivered it.
Cy4Sec is a UK consultancy led by Carl Pitts, who has spent more than 20 years delivering security and technology programmes for organisations including Airbus, easyJet, Stellantis, Etihad Airways and Virgin Atlantic.
- CISSP
- CISM
- CISA
- CEH
- PMP
- PRINCE2
What Cy4Sec does
How an engagement runs
- 1
Scoping call
Thirty minutes to agree the question you need answered.
- 2
Fixed-fee proposal
A written scope, timeline and price, agreed before any work starts.
- 3
The work
Carried out against the agreed scope, with written authorisation for any testing.
- 4
Report and debrief
Findings ranked by risk, with fixes, walked through with your team.
Research behind the work
Carl also edits The Cyberfool, an independent publication on scams and security threats.
Spoofed police calls targeting cryptocurrency holders
Callers are spoofing real police force numbers to persuade victims to hand over crypto wallet recovery phrases. The article traces the warnings force by force and sets out what genuine police will never ask for.
What a phone permission audit fixes, and what it does not
What auditing the app permissions on your phone actually changes. It is equally clear about where that protection stops.
How attackers get past multi-factor authentication
A business email compromise case study showing how attackers get around multi-factor authentication. It sets out the controls that make that harder.