About
Security advice you can act on, from people who have done the work.
Cybaethrex is a security consulting practice built around AI risk, governance and technology advisory. The name is Cyber, Aethics and Rex, security practised with ethics at the front.
- Model
- Founder-led
- Lead practice
- AI Security
- Delivery
- Senior, direct
- Reach
- Global · remote-first
What we are, and what we do.
Security consulting is a crowded word. Here is exactly what it means here, including the parts we decline.
A specialist security consulting practice: not a reseller, not a managed service, not a body shop. Senior practitioners who assess, advise, architect and assure, with AI security as the lead discipline.
We establish what an adversary can actually reach in your systems, translate it into decisions with costs attached, design the fix at root cause, and produce the evidence that proves it holds.
We do not sell tooling, staff long-term augmentation, or run your security operations. When an engagement is unnecessary, we say so, which is why the scoping call is free and technical.
Most security reports are read once and filed.
They describe issues rather than consequences, and leave the reader to work out what to do on Monday morning.
We work the other way round: establish what an adversary can actually reach, translate it into decisions with costs attached, design the fix at the level of root cause, and then prove it holds.
That sequence: assess, advise, architect, assure, is the whole method. It is deliberately unglamorous, and it is the reason clients can show our work to an auditor rather than filing it.
CYBER · AETHICS · REX
Small, senior, and honest about scope.
The operating model is the product. These four choices decide what an engagement is worth.
Founder-led delivery
The person who scopes an engagement delivers it. There is no handoff to a junior bench after signature, and no template report waiting to be populated.
Deliberately small
Capacity is capped so that senior attention is the default rather than an upgrade. We turn work away rather than staff it thinly.
Ethics before commercials
Cyber, Aethics, Rex. We will tell you when a control is adequate, when an engagement is unnecessary, and when the honest answer is that you do not need us yet.
Practice keeps teaching honest
The consulting work is what keeps the training current, and the training is what forces the practice to explain itself clearly. Neither would be as good alone.
Four rules we do not trade away.
- 01Scope by objective, not by asset count
- 02Write findings as paths, not as inventory
- 03Fix at root cause, not at symptom
- 04End every engagement in evidence
Certified where it counts.
Certifications are a floor, not a differentiator: but for AI governance work in particular, they are what lets us sign the assessment.
- AIGP
- AAISM
- CISSP
- CCSP
- CISM
- CEH
- CCNP Security
- AWS Security Specialty
- Azure Security
9+
Certifications held
AIGP, AAISM, CISSP, CCSP, CISM
AI-first
Lead practice
LLM, RAG, agents and MCP
Direct
Senior delivery
No handoff to a junior bench
Evidence
Every engagement ends in it
Audit and customer-review ready
Next step
Want to know if we are a fit?
Ask us directly.
We will tell you when a control is adequate, when an engagement is unnecessary, and when the honest answer is that you do not need us yet.