What to Look for When Hiring a Security Consultant (Honest Advice)
Hiring a security consultant can feel like a leap of faith, especially if you’re not a security expert yourself.
InfoSec Consulting
Secure Your Environment. Educate Your Team.
We help small and medium businesses assess, understand, and strengthen their security posture, one project at a time.
Explore Services Get in TouchProject-Based Engagements
No long-term contracts or retainers. Clear scope, defined deliverables, and transparent pricing on every engagement.
Measurable Results
Every engagement produces detailed findings, risk ratings, and actionable remediation guidance you can execute on immediately.
Education-First Approach
We don’t just find problems. We help you understand them. Every report is a learning opportunity for your team.
What We Offer
Security Consulting Services
From foundational assessments to specialized security testing, we meet you where you are.
Core Services
- Small Business Consulting Analysis
- Health Assessments (VMware, AD, Cloud, Vulnerability)
- Custom Engagements
Specialized Services
- AI Automated Penetration Testing
- IT Risk Analysis (NIST, CIS, ISO 27001)
- Firewall Rules Analysis
- Password Analysis
18+
Years Experience
14
Certifications
CISSP
Certified
M.S.
IT Management
Derek Creason
Founder & Principal Consultant
18+ years in information security, CISSP certified, and a Master’s in IT Management. Derek brings enterprise-grade expertise to small and medium businesses, with an education-first approach to every engagement.
Learn more about usInsights & Resources
We write about cloud security, vendor reviews, AI in security, and practical guidance for IT teams navigating today’s threat landscape.
Read the Blog
Ready to Get Started?
Every engagement begins with a conversation. Tell us about your environment and we’ll help you figure out the right next step.
Contact UsRecent Posts
Why Every Business Needs an Asset Inventory Before Anything Else
An asset inventory is the foundation everything else in security is built on. Without one, every other security investment is less effective than it should be.
What an Internal Vulnerability Scan Actually Finds
Here’s what an internal vulnerability scan actually does, what typical findings look like, and why it’s one of the most valuable things you can do for your security posture.