Areas of expertise
My work at Conversec concentrates on what happens around the testing itself: how teams make decisions, maintain quality, develop consultants, and keep delivery dependable as they grow.
- Penetration testing team performance
- Offensive security delivery leadership
- Penetration testing quality assurance
- Consultant development
- Client communication and reporting
How I write
Most articles start with a delivery problem I have seen teams wrestle with. I use standards and primary guidance where they add useful context, then bring in the practical judgement that comes from working with offensive security teams.
The aim is simple: give you a clear answer, explain the trade-offs, and leave you with something useful for the next team or client conversation. I review articles when the guidance—or my view—changes.