Proactive
01Threat intelligence
Proactive identification and analysis of emerging cyber threats before they reach your systems. Continuous monitoring, adversary profiling and early-warning systems.
Cybersecurity practice
Security that holds when it’s tested.
Protecting organisations through strategic security frameworks, threat intelligence and resilient infrastructure, built on deep expertise across enterprise and government environments.
50+Security cases resolved
98%Threat detection
0Breaches post-deploy
Scan · active
3 signals flagged
What I do
Security services, end to end.
From finding weaknesses before attackers do, to responding when they strike, to advising the board on what it all means.
Offensive
02Penetration testing
Authorised simulated attacks on your infrastructure to expose vulnerabilities. Network, web app, social engineering and red team operations.
Strategic
03Security architecture
Robust security frameworks: zero-trust models, network segmentation, identity management and cloud security posture management.
Governance
04Compliance & GRC
Navigate complex regulation: ISO 27001, GDPR, NIST, SOC 2. Risk assessment, gap analysis and remediation roadmaps.
Reactive
05Incident response
Rapid containment, investigation and recovery when breaches occur. 24/7 response, forensic analysis, evidence preservation and post-incident hardening.
Education
06Security training
Building a human firewall: board-level cyber-risk workshops, phishing simulation, OSINT awareness and secure-coding programmes for developers.
Preventive
07Email & phishing security
End-to-end email hardening: SPF, DKIM and DMARC configuration, anti-phishing controls, business email compromise prevention and staff simulation campaigns.
Continuous
08Vulnerability management
Continuous scanning and prioritisation across your infrastructure. Automated detection, CVSS scoring, patch tracking and recurring remediation cycles.
Proactive
09Data protection & encryption
Data classification, encryption at rest and in transit, key management, DLP policies and regulation-aligned data governance frameworks.
Active defence
10Cyber defence & countermeasures
Active defence: deception technologies, honeypots, threat hunting and adversarial countermeasures to detect and neutralise attacks in real time.
Advisory
11Strategic security insight
Executive advisory that translates complex threat landscapes into business risk, security roadmaps, board reporting and long-term resilience planning.
Book a security posture check.
A short conversation to understand your systems and tell you where the real risks are.
Get in touch
Threat landscape
What organisations are up against.
Most common attack vectors
Source: [ADD SOURCE AND YEAR]
Top attack vectors
Live audit simulation · security posture check
❯ run security-audit --target client.org
// initialising scan modules...
✓ Network topology mapped [247 nodes]
✓ SSL/TLS certificates validated
⚠ Outdated firmware detected [3 devices]
✓ Firewall rules audited [142 rules]
✗ CVE-2024-3094 — patch required
✓ IAM policies reviewed
⚠ MFA not enforced [12 accounts]
✓ Encryption at rest verified
❯ generate-report --format pdf
✓ Report generated: audit_report.pdf
❯
Methodology
How I work.
Five stages, repeated on a cycle, so security keeps pace with your systems as they change.
- 01
Discover
Asset inventory, attack-surface mapping and stakeholder interviews.
- 02
Assess
Risk scoring, vulnerability analysis and threat modelling.
- 03
Remediate
Prioritised patching, architecture improvements and new controls.
- 04
Harden
Zero-trust implementation, policy enforcement and system hardening.
- 05
Monitor
SIEM tuning, continuous monitoring and quarterly reviews.
Credentials
Trained, certified, tested.
MSc Cybersecurity & Forensics
University of Westminster, London. Studied as a Chevening Scholar, 2022–2023.
UK National Cyber Security Centre certified
Recognition aligned with the UK’s national standard for cyber security education.
Website breach, contained
loyocameroon.org was compromised through a staff mailbox. Contained the attack, removed malware, hardened email and rebuilt the backend.
Let’s talk
Ready to fortify your defences?
Whether you need a rapid assessment, ongoing advisory or incident response, let’s talk about securing what matters most to your organisation.
contact@felixfomengia.com