Invest in tomorrow, by securing today.
PenCrimson L.L.C. is a security holding company. It builds and runs the companies in its portfolio, and it delivers security consulting directly, under one roof and one set of operators.
Structure
Think of it the way you'd think of any parent with operating subsidiaries. Each company has its own product, its own roadmap, and its own customers. What they share is the bench, the tradecraft, and the standard for what is worth shipping.
TensorOne is the flagship and the largest of the three: agentless detection and response for the datacenter layer, in production today. Cerebro carries the threat intelligence platform and all of our offensive work, and admits members by invitation. Crimson Academy runs the training curriculum and feeds the bench that the other two hire from.
The consulting desk sits at the parent. It is how most conversations with PenCrimson begin, and it is deliberately product-agnostic until the diagnosis says otherwise.
Parent
PenCrimson L.L.C.
Holding · Security consulting
Leadership
PenCrimson, and every company under it, is run by the same two people.
James Ball is a U.S. Army veteran with over a decade of technical and leadership experience at the National Security Agency and multiple Fortune 100 companies.
His technical expertise includes threat hunting, cyber threat intelligence, advanced networking, penetration testing, programming, advanced persistent threat discovery, DevSecOps, and vulnerability research.
Using his penchant for innovative prowess and commitment to quality, he has built a team at PenCrimson that is passionate about strengthening the security of our nation's businesses, services and infrastructure.
Sean is a decorated U.S. Marine Corps veteran who has two decades of experience in designing security protocols for U.S. government agency facilities at home and abroad.
He is the Swiss Army knife of PenCrimson. There's nothing that he can't or won't do to help us achieve our mission. His dense network of worldwide professional acquaintances and overall area of influence enables PenCrimson to perform with an unusually high level of efficacy.
His understanding of defense-in-depth strategy has given PenCrimson the edge amongst the competition time and time again.
Operating principles
Offense-informed defense
Every defense we build starts from how an operator would get in. Both founders spent their careers on that side of the work.
Need-to-know handling
Decades around classified work taught us to separate what is useful to share from what would burn a source, a client, or a victim. It is the discipline Cerebro is built on.
Build the bench
Crimson Academy trains the bench the other companies hire from. Its curriculum is drawn from what the consulting and product teams need people to know, starting at the first terminal command.
Share what we learn
A method used on one defender will be used on the next. Where it is lawful and safe, we would rather the next firm not learn the hard way.
Get in touch
One conversation, no pitch deck. We'll tell you whether it's a TensorOne problem, a Cerebro problem, a training problem, or a consulting engagement, and what it would take.