01
Mature defences, honest test
EDR everywhere, a working SOC, a clean pentest. You still want to know how far an attacker already inside could get and which telemetry would catch them.
Consulereit · Independent cybersecurity
Offensive security
and advisory,
delivered by one consultant.
I am an independent senior cybersecurity consultant based in the Netherlands. I work with boards, CISOs, and security teams on offensive testing, security architecture reviews, and SOC design across defence, critical-infrastructure, healthcare, and industrial environments.
What I do
Three ways
engagements usually start.
01
Penetration testing & red team
Web, infrastructure, cloud, and mobile pentests, plus full assumed-breach red team operations against mature estates. Modelled on real adversary behaviour, not a checklist.
Read more
02
Security architecture & advisory
Reviews of how your environment is put together and where the brittle joints are. Architecture reviews and programme reviews, delivered as written recommendations you can act on.
Read more
03
SOC design & build
Help designing or rationalising an in-house security operations capability with a three-year horizon. Detection coverage, tool rationalisation, staffing model — vendor-neutral, no kickbacks.
Read more
Why independent
One consultant,
start to finish.
When you hire a large consultancy, you meet the senior people in the pitch and work with junior staff in delivery. When you hire me, you get the person you met.
There is no sales-to-delivery handoff, no partner overhead, and no rotation of junior associates through your environment. The person scoping your engagement is the person writing the exploits and presenting at your board meeting.
For clients who value directness and a written, opinionated view, that matters more than a brand name on the invoice.
Scenarios
Situations I commonly help with.
See more →
02
Six tools, one renewal cycle
Overlapping SOC tools and a seven-figure renewal coming up. You want an independent view of what each tool earns its keep doing before you sign for another three years.
03
Connected product, never tested
An IoT or OT-adjacent environment has never had an honest external test. The team wants findings they can fix, not a stack of CVSS numbers.
A short conversation is the fastest way to know.
Most engagements begin with a 30-minute call. I'll listen, ask a few questions, and tell you honestly whether I'm the right fit, or point you at someone who is.