References

References should build confidence without compromising discretion.

Some organisations can be named publicly.
Many others expect confidentiality as part of the engagement.

Where disclosure is permitted, we can point to publicly named organisations.
Where it is not, we focus on the substance of the work, the operating style, and the kind of outcomes management teams should expect.

Selected References

Publicly named organisations

These are organisations OR Security can name publicly.
Many other engagements remain private.

Reference Discussion

What a reference discussion should clarify

What kind of problem needed to be solved.
Whether the work was advisory, technical, or a mix of both.
How priorities, communication, and follow-through were handled.
What made the support credible in practice.

Disclosure Limits

What we usually keep private

Detailed internal findings, architecture, and control gaps.
Operational or regulatory details that identify sensitive context.
Statements that go beyond what the client has chosen to disclose publicly.
Anything that would turn a reference into theatre rather than evidence.

Reference Request

Ask for the references most relevant to your situation.

If you are evaluating support for a specific operating problem, we can focus the discussion on the closest comparable work we are able to share responsibly.

Request a reference discussion