Independent cybersecurity expertise for organizations, executives, and family offices, for the risks no software product solves. Take it as a fixed-scope engagement, or as an ongoing virtual CISO subscription.
Start here
The work is different depending on who the target is. Pick the one that describes your week.
You own security for a company, or you are the executive who inherited it. You need to know where you actually stand, in what order to fix it, and how to answer the board, the auditor, or the customer asking for your security posture.
See engagements for organizations →You are an executive visible enough to be worth targeting personally, or a family office responsible for principals and their households. Names, devices, voices, and family members are all in scope for an attacker, and none of it is covered by what the company bought.
See engagements for executives and family offices →Track one
Senior security judgment, without the headcount and without a twelve-week discovery phase.
What you can hire me to do
Virtual CISO Subscription
Monthly subscription, three-month minimum
The seat is covered by someone who has sat in it, month after month, for less than the seat costs.
One-Week Security Assessment
Five working days, report included
You end the week knowing what to fix, in what order, and what it buys you.
Track two
The company bought protection for the company. Nobody bought it for the principal, their household, or the people around them. That is where attackers go now.
What you can hire me to do
Executive Exposure Report
One engagement, one report
You see yourself the way someone targeting you already does.
Family Office Program
Multiple principals, one accountability
The office can answer the question it currently cannot: are our families secure, and how do we know.
An individual family, not a family office? You want the app, not an engagement. Remi walks your household through the same fixes →
These are the engagements that come up most, not the limit of the work. Diligence on an acquisition, a security program built from nothing, a board that needs to be brought up to speed, a threat nobody has a playbook for yet. Bring the problem and it gets scoped honestly, including when the honest answer is that you do not need me.
The terms
Set before anything starts, so the work is about the problem instead of the invoice.
Project work is quoted as a whole after a short call. Ongoing work runs as a virtual CISO subscription at a flat monthly fee, so the cost is predictable and so is the coverage. Either way, no hourly billing and no meter running on a phone call.
Project work produces something written that outlives the conversation, and a live session where the people who have to act on it can argue with it. Subscriptions report on a standing cadence.
One call to understand the problem and what is already in place. You get the scope and the quote in writing after it, not a proposal built to be negotiated down.
These engagements are delivered personally, so only a few run concurrently. Timing is committed once an engagement is signed, never guessed at beforehand.
Scope is what drives a quote, so it is worth knowing what moves it: the size of the organization, the complexity of the environment, the regulatory and contractual scope you have to satisfy, and for family office work, how many principals and households are covered. Two engagements with the same name can be very different pieces of work, which is why the number comes after the call and not before it.
Who you are hiring
Corey White is the founder of Cythentic. He has spent more than thirty years in cybersecurity, protecting Fortune 500 institutions, governments, and critical infrastructure, and has held senior consulting and executive roles building and running security services organizations at scale. At Cylance he built ThreatZERO, the delivery model behind one of the first AI-driven endpoint protection companies.
He previously founded, scaled, and sold a managed cybersecurity company with zero reported major customer breaches across seven years, protecting more than 200 organizations. He is the author of the forthcoming book You’re Already a Target, and he built Remi, the guided remediation product that grew out of the same work.
Engagements are delivered by Corey. Not by a team you meet once during the pitch and never see again.
Thirty minutes, no charge, and you leave it knowing whether there is an engagement here or not.
Not ready for an engagement? Remi, our product, scores your personal security and walks you through the fixes →