Home / Corporate

Protect the business from the inside out.

Businesses call me when the risk is people — the caller who talks their way past the help desk, the hire whose résumé doesn't add up, the inventory that keeps disappearing. I find out what's really happening and help you fix it.

Most requested

Where businesses get the most value.

What Michigan businesses ask for most — and where a focused engagement often makes the biggest difference.

Social engineering assessments

Your firewall gets audited every year. Your front desk doesn't. I run authorized phone, email and on-site tests that show where an attacker could get in.

  • Help-desk & front-desk phone tests
  • Phishing and executive-impersonation emails
  • Tailgating and physical access attempts
  • Written report, ranked fixes and staff debrief
engagement --scope "HQ + help desk" --auth signed
✓ rules of engagement approved
✓ phone tests · reset requests granted: [n]
✓ on-site · tailgate challenged: [yes/no]
→ report + fixes delivered

Illustrative example — not client data

Pre-employment & executive backgrounds

Verify the résumé, the references and the history before you hand over the keys.

  • Key hires & executives
  • Licenses, education, employment
  • Litigation & judgments

Internal investigations

Theft, fraud, harassment complaints and policy violations, handled quietly with findings that support your decision.

  • Employee theft & inventory loss
  • Expense and vendor fraud
  • Misconduct complaints

Workers' comp & disability surveillance

Documented activity checks when a claim doesn't add up — fair to the employee, clear for the adjuster.

  • Activity & surveillance reports
  • Photo and video documentation
  • Findings documented for court use
Also available

More for businesses

Due diligence

Check out a partner, vendor or acquisition target before you sign.

Security awareness training

Short sessions built from real attempts against your own team — the kind people remember.

MSP & IT partner program

IT providers: bring human-layer testing to your clients. I work alongside you, with authorization signed by your client.

How it works

Simple, private, on your terms.

Every engagement is scoped and authorized in writing before work begins, with a point of contact who can verify me at any time.

Consult

A confidential call about the concern and what success looks like.

Authorize

Written scope, rules of engagement and agreed pricing.

Execute

Testing or investigation, documented at every step.

Report

Findings, fixes and a debrief with your leadership.

Questions

Good to know

Is social engineering testing legal?

Yes — when it's properly authorized. Every test starts with signed approval from someone with authority over every system and building in scope, including landlords or providers where needed. I carry that authorization during on-site work and never use access beyond the agreed scope. I never test an organization that hasn't asked.

Will employees get in trouble?

The goal is to find process gaps, not to punish people. I recommend findings be used for training, and reports focus on what was allowed to happen and why.

What about the FCRA?

When my background research is used for a hiring decision, the FCRA applies. I'll ask you to confirm the candidate's written disclosure and authorization before I start, and I follow the FCRA's rules on my end. Your employment counsel should confirm your own steps.

How long does an assessment take?

Most run one to four weeks depending on scope, ending in a written report and debrief.

Contact

Have a matter that needs straight answers?

Every inquiry comes straight to me and is kept private. Direct phone and secure online intake are launching shortly.