AI Governance · Cyber Defense · Systems Thinking
Founder, AIFortess — building systems that make AI defensible, auditable, and regulator-ready.
I design practical security and governance systems for a world where startups move fast, AI scales decisions, and compliance can't be an afterthought.
The goal is simple: less friction, fewer surprises, and more shipping.
Modern security is reactive, human-heavy, and always late. AI governance is repeating the same mistake — spreadsheets, slide decks, and audit-cycle theatre.
I'm working toward systems where:
- security is continuous
- compliance is built-in
- AI risk is mapped, not narrated
- audits are an output, not a project
This is not about more tools. It's about changing how security and governance fit into how AI products get built.
I spend most of my time building, testing, and shipping.
AIFortess — aifortess.com
AI-native products at the intersection of cybersecurity, AI security, and governance.
- AIFortess Assessor — ISO 42001 and AI governance readiness for independent consultants and small AI teams. Define systems, assess risk and controls, identify gaps, export readiness.
- Vertias.ai — Multi-cloud CSPM (AWS, GCP, Azure) mapped to CIS Benchmarks, SOC 2, NIST 800-53, ISO 27001, PCI DSS, and HIPAA — with AI-driven remediation.
k8s-scanner — agentless Kubernetes security scanner focused on:
- best-practice validation
- CVE detection
- engineer-first usability
Built to solve a problem I had to solve myself.
- AI teams and technical founders shipping GenAI products under real scrutiny
- SaaS startups (0–50) preparing for SOC 2, ISO 27001, ISO 42001, or investor diligence
- CISOs, security architects, and compliance leads who need tools that fit existing workflows
- Independent advisors and fractional execs who need structured methods across engagements
If you're scaling quickly and security or AI governance feels fragile, this work is for you.
- Security should enable velocity
- Governance should be operational, not ceremonial
- AI should amplify engineers
- Automation beats documentation
- Systems beat heroics
- Ship, observe, improve
Founders shouldn't fear audits, security, or AI risk. They should fear shipping AI without systems that scale with them.