What I offer
Security and privacy work that sticks.
Every engagement is tailored to your actual threat model — not a checklist sold to everyone. My work spans device and network hardening, identity compartmentalization, and hands-on education so you can maintain what we build together. Scroll to explore each service area, or jump directly to the one that matters most right now.
Service 01
Digital Security & Privacy
End-to-end hardening of your digital footprint — from device-level controls to network hygiene and identity management.
- Threat-model assessment tailored to your actual risk profile
- Device hardening: encrypted storage, secure boot, minimal attack surface
- Identity & credential hygiene: password managers, 2FA, account separation
- Network security: DNS-over-HTTPS, VPN selection, traffic analysis awareness
- Privacy audit of installed apps, permissions, and data-sharing exposures
Service 02
Compartmentalization
Isolate your identities, devices, and workflows so a breach in one domain never cascades into the others.
- Work / personal / sensitive profile separation on mobile and desktop
- GrapheneOS user-profile setup for true app-level isolation
- Browser compartmentalization: distinct profiles per context with hardened configs
- Account separation strategy: no cross-contamination of identities or credentials
- Step-by-step documentation so you can maintain the setup yourself
Service 03
Workflow Automation
Remove repetitive manual steps from your security and productivity workflows with reliable, privacy-respecting automation.
- Scripted backup, sync, and rotation routines (no cloud lock-in)
- Automated credential rotation and audit pipelines
- CLI tooling and shell workflows for day-to-day privacy hygiene
- Integration of open-source tools: KeePassXC, Syncthing, rsync, and more
- Documented runbooks so the automation is understandable and maintainable
Service 04
Hardware & Finance Advice
Objective, vendor-neutral guidance on the right hardware and financial tooling for your security and privacy requirements.
- Phone selection: GrapheneOS-compatible Pixel hardware and procurement guidance
- Laptop and peripheral recommendations with firmware/supply-chain considerations
- Privacy-respecting payment methods and financial account hygiene
- Second-hand hardware vetting and sanitization workflows
- No affiliate links, no vendor bias — advice aligned to your goals
Service 05
Consulting & Education
Hands-on consulting sessions and structured learning so you understand the "why" behind every recommendation.
- One-on-one consulting: remote or in-person, tailored to your skill level
- Threat-model workshops: map your risks, prioritize mitigations
- Guided walkthroughs of tools and configurations — not just instructions, but understanding
- Written follow-up notes and a personal security roadmap after each engagement
- No lock-in: the goal is your independence, not your dependency
Next step
Ready to talk specifics?
Tell me what you're trying to protect and I'll outline a concrete approach in a first free conversation.
Get in touch