I help UK manufacturers understand and reduce their OT/ICS cyber risk — from the outside in, before attackers do. Former CNC programmer turned security professional: I've stood next to the machines I now protect.
My path into cybersecurity started on the factory floor. I spent years as a CNC programmer and precision engineer, working with the exact kind of industrial control systems that attackers target today — Siemens, Fanuc, Haas. I understand the physical consequences of a compromised PLC, not just the theoretical ones.
That background led me into enterprise security operations — running detection and response across complex, multi-site environments with significant OT exposure. I've led OT security initiatives from scratch: scoping, vendor evaluation, sensor placement design, and IEC 62443 gap mapping against live industrial environments.
"Most consultants have never stood next to a running CNC machine. I have — and I know what 'downtime' actually costs."
I work with UK manufacturers and industrial operators to identify and reduce OT/ICS risk — combining hands-on engineering instinct with enterprise-grade security methodology. No large firm overhead, no junior consultants on your site.
The following assessments were conducted using public OSINT sources only — no client authorisation required. Each represents a real organisation with real exposure, presented here in anonymised form.
All assessments conducted using legal public OSINT sources only (Shodan, crt.sh, VirusTotal, BGP/ASN).
No client systems were accessed. Company identities withheld. Data accurate at time of scan.
Before any engagement, I run a zero-touch outside-in assessment using public OSINT sources. Clients see their attack surface — CVEs, OT protocol exposure, shadow IT, expired certificates — mapped against NIS2 articles. No access required. Maximum impact.
I can run a zero-touch outside-in assessment of your domain before our first call — free of charge. You'll see exactly what I see, and exactly what attackers see.