Hacker Security helps organizations protect sensitive information, assess risk, and make informed decisions through security advisory, focused analysis, and practical training.
Engagements are led directly by Michael Hacker. Each begins with an agreed question, scope, deliverables, and timeline.
Security Consulting
Practical guidance for organizations that need experienced security judgment for a project, policy, or technology decision.
Operational Security
Identify the information that matters to your organization, how routine activities may expose it, and what safeguards are appropriate. Reviews can address communications, remote work, business travel, sensitive research, and product launches.
Deliverables: An assessment of information exposure, prioritized recommendations, and a debrief with your team.
Policy Development and Review
Develop or revise information security policies so that responsibilities, expectations, and procedures are clear and workable.
Reviews examine whether written requirements fit the organization’s activities and whether staff can realistically follow them.
Deliverables: Draft or revised policies, an explanation of significant changes, and implementation recommendations.
Security Reviews for Research and Sensitive Projects
Evaluate how a proposed project will collect, access, store, share, and retain sensitive information. Identify security concerns and recommend safeguards that support the work.
Deliverables: A documented security assessment, recommended controls, and questions requiring resolution by the project’s decision-makers.
AI Security Reviews
Assess proposed AI tools and workflows from an information security perspective, including the information entered into them, access arrangements, vendor data practices, and handling of outputs.
Deliverables: A security assessment and recommendations on whether and under what conditions to proceed. The client retains approval authority unless otherwise agreed. Legal, academic, and ethical approvals require their own appropriate review.
Intelligence and Analysis
Focused research and analysis to support a defined organizational decision.
Potential subjects include industry developments, emerging technologies, geopolitical conditions, and their implications for the organization. Each engagement begins with the decision to be supported and the information needed to address it.
Analysis distinguishes established facts from assessments, identifies information gaps, and explains uncertainty.
Deliverables: A sourced written brief, key findings, confidence judgments, practical implications, and a discussion with the client.
Intelligence engagements are accepted only after confirming their scope and applicable licensing requirements. Investigations of individuals, background checks, surveillance, and other regulated investigative services require a separate licensing determination and are not included in this offering.
Training and Workshops
Training designed to help participants apply security and analytical principles in their everyday work.
Topics can include:
Operational security and protecting sensitive information
Social engineering, deception, and manipulation awareness
Source evaluation and information verification
Analytical reasoning, assumptions, and uncertainty
Secure use of AI tools
Information security responsibilities for staff and leadership
Sessions connect core concepts to realistic situations, with exercises and discussion tailored to the audience.
Deliverables: An agreed session plan, live instruction, participant materials, and practical actions to carry into the workplace.
Working Together
Engagements may take the form of a defined assessment, written brief, workshop, or limited ongoing advisory arrangement.
Confidentiality, information handling, client responsibilities, and any exclusions are addressed before work begins. Recommendations explain both the available evidence and the limits of the assessment.
To discuss an engagement, describe the question you need answered, the decision or activity it supports, and your preferred timeframe. Please avoid including sensitive information in an initial inquiry.