Invest in tomorrow, by securing today.
PenCrimson L.L.C. is a security consulting firm. It delivers consulting directly, runs the Cerebro threat intelligence desk, and teaches through Crimson Academy, with one set of operators behind all three.
What we do
Consulting is how most conversations with PenCrimson begin, and it is deliberately product-agnostic until the diagnosis says otherwise. Cerebro carries the threat intelligence platform and all of our offensive work, and admits members by invitation. Crimson Academy runs the training curriculum and feeds the bench the consulting desk and Cerebro hire from.
What the three share is the bench, the tradecraft, and the standard for what is worth recommending.
Partners. Where the right answer is a product, we name one. For hypervisor and control-plane visibility that is usually TensorOne, an independent company we refer clients to.
Services
PenCrimson L.L.C.
Security consulting
Leadership
PenCrimson is run by its two founders.
James Ball is a U.S. Army veteran with over a decade of technical and leadership experience at the National Security Agency and multiple Fortune 100 companies.
His technical expertise includes threat hunting, cyber threat intelligence, advanced networking, penetration testing, programming, advanced persistent threat discovery, DevSecOps, and vulnerability research.
Using his penchant for innovative prowess and commitment to quality, he has built a team at PenCrimson that is passionate about strengthening the security of our nation's businesses, services and infrastructure.
Sean is a decorated U.S. Marine Corps veteran who has two decades of experience in designing security protocols for U.S. government agency facilities at home and abroad.
He is the Swiss Army knife of PenCrimson. There's nothing that he can't or won't do to help us achieve our mission. His dense network of worldwide professional acquaintances and overall area of influence enables PenCrimson to perform with an unusually high level of efficacy.
His understanding of defense-in-depth strategy has given PenCrimson the edge amongst the competition time and time again.
Operating principles
Offense-informed defense
Every defense we build starts from how an operator would get in. Both founders spent their careers on that side of the work.
Need-to-know handling
Decades around classified work taught us to separate what is useful to share from what would burn a source, a client, or a victim. It is the discipline Cerebro is built on.
Build the bench
Crimson Academy trains the bench the consulting desk and Cerebro hire from. Its curriculum is drawn from what those teams need people to know, starting at the first terminal command.
Share what we learn
A method used on one defender will be used on the next. Where it is lawful and safe, we would rather the next firm not learn the hard way.
Get in touch
One conversation, no pitch deck. We'll tell you whether it needs a consulting engagement, Cerebro, training or a product, and what it would take.