ACCESS

There is a skill that does not appear in any certification catalogue and cannot be acquired in a seminar, because it is not a technique but a reflex built over decades of exposure to situations where the truth is present in the room but nobody is saying it out loud. I read people. Not in the motivational-speaker sense of noticing body language. In the forensic sense of hearing a sentence and simultaneously registering the architecture underneath it, the precise point where the speaker turns slightly away from what they actually know, the half-second that is not hesitation but concealment, the framing that is technically accurate and functionally a lie.

I have done this in courtrooms for 25 years. I do it in board meetings, in team calls, in crisis negotiations, in the first five minutes of an intake conversation with a client who has already decided what they want to hear. The inconsistency is always there. I see it before the sentence is finished. That is not a gift. It is the consequence of two and a half decades of sitting across from people who had very serious reasons to obscure the truth, under conditions where the margin for error was a human life or a judicial outcome, and learning to let none of them do it.

Large organizations develop a specific and largely invisible blindness to their own dysfunction. The governance structure calcifies. The accountability chains grow longer and thinner until the person with the authority to fix a problem is no longer the person close enough to see it. The process documentation becomes the reality that everyone officially inhabits while the actual behavior of the organization quietly diverges from it in ways that cost money, accumulate liability and generate exactly the kind of friction that shows up in financials but never in meeting minutes.

I have walked into enough of these structures to recognize the pattern within the first conversation. It does not require weeks of analysis. It requires asking the questions that the internal review process structurally cannot ask, because the people running the internal review are inside the same blind spot they are trying to examine. That is the specific value of an external mind with no investment in the existing answer.

Since 1 August 2026 the focus of this practice is cybersecurity. Prevention and hardening, not fire-fighting after the breach has already happened. Server security, secure architecture, and software development, built by someone who spent decades on the forensic side of what happens when security fails.

I approach a system the way someone trying to break it would, under contract and in writing, and then I close what I find. Modern development ships features faster than ever, and vulnerabilities at the same pace. Vibe coding is not the problem. Vibe coding with no threat model, no security layer, and no one in the process who has ever looked at the system from the outside trying to get in, that is a different situation, and it is rarely subtle when it fails.

The forensic work does not stop. Bones and skulls in particular, I still write expert reports in that field, worldwide. It is the foundation the security work stands on. Reconstructing how things actually went wrong is the reason I can see, in a live system, where they are about to.

This practice participates in the Alliance for Cyber Security, an initiative of the German Federal Office for Information Security (BSI), and develops within the Apple Developer Program.

I do not sell packages. There is no pricing page, no tier structure, no feature table. The work is bespoke because the problems are bespoke, and starting with a package price is a reliable mechanism for solving the wrong problem at the wrong level of abstraction. The first question I ask is not what your budget is. It is what the actual problem is, stated plainly, before the version of it that has been pre-edited for palatability. If I cannot help, I will tell you that within the first exchange, without softening it. If I can, the conversation moves at a pace that most people find faster than they expected.

Contact is via Telegram. Anonymous enquiries are fully supported and handled without further questions about identity or context. If your situation requires discretion, that is not a complication on this end. It is a standard operating condition. The threshold for reaching out is lower than you think. The problem does not need to be fully formed. It just needs to exist.