ABOUT STEEL.FYI

Security without
the wastage.

I started steel.fyi because, after a decade building security teams, I'd seen a lot of wastage: expensive tools nobody configured, policies nobody read, and small companies frightened into spending money in the wrong places.

THE IDEA

Grown-up security, sized for you.

Small organisations get priced out of good security. A full-time CISO costs six figures, and the big consultancies send a junior with a template.

steel.fyi is the alternative: one experienced person who has been the first security hire many times over, working a day or two a month, or for one well-scoped audit. You get the judgement without the overhead.

I start every engagement with three questions. What are we protecting? From who? And why does it matter to the business? Everything else follows from the answers.

WHAT I BELIEVE

Four rules I work by.

Commercial first

Security should help you win business. If it doesn't cut real risk or close real deals, we don't build it.

Honest about spend

I'll tell you what not to buy, even when that means less work for me.

AI-literate

I use AI to take the admin out of compliance, so you pay for judgement. And I help teams adopt AI without leaking their data.

Doing good

LGBTQ+ led and carbon positive. Part of my time goes to charities for free, and B Corps get 10% off.

Corporate social responsibility →

Let’s talk.

Tell me what you're dealing with. I reply within one working day.

Security withoutthe wastage.