About | IDEALLY US

I spent seven years at Mandiant, the last of them inside Google after the acquisition, leading offensive security services across Asia Pacific and Japan. Banks, insurers, governments and Fortune 500 companies hired my teams to break in under contract, using the same tools and tradecraft as the attackers they were worried about, so their defenders could watch the attack land while it was still a rehearsal.

Why me

Offensive security experience

I have tested ransomware, credential theft, supply chain attacks and persistent access against client environments, with permission and documented findings. That experience informs how I assess defences and recommend controls.

Experience building and buying security products

I built detection at Qualys and Trend Micro, consulted at Deloitte, NTT and Mandiant, and bought security for AXA. I know how products are priced, how they demo and where the gaps are. IDEALLY US does not resell software or receive vendor referral fees.

Team leadership and coaching

A decade managing teams across Asia, plus training as a certified coach and psychological safety practitioner. I help teams agree responsibilities, make decisions and maintain the systems we hand over.

Technical briefings for boards

My work has been covered by Reuters, Forbes and SC Magazine, and I have spent years turning technical findings into decisions executives can make. Reports cover the decisions, costs and technical actions required.

The team

I work with senior consultants across security, AI engineering and marketing, each with a decade or more of experience. The consultants involved in scoping the project also deliver the work.

Twenty years in offensive security and consulting.