PenCrimson builds and operates security companies.
Parent company to TensorOne, Cerebro and Crimson Academy, and the consulting desk the three of them are routed through. Describe the problem and we will tell you which company it belongs to, or scope the engagement ourselves if none of them fits.
Parent
PenCrimson L.L.C.
Holding · Security consulting
TensorOne. Detection and response for the layer your EDR can't reach.
Our most developed company and product. Behavioral detections and response playbooks for the hypervisor control layer, mapped to MITRE ATT&CK and engineered by former NSA operators. The same pipeline detects what endpoint tools can't reach, across VMware, Proxmox, Nutanix, OpenShift, KVM and cloud.
Portfolio
Each company works a layer the industry under-covers. TensorOne is in production, Cerebro admits members by invitation, and Crimson Academy is enrolling.
Agentless detection for hypervisors and control planes, paid for by the SIEM noise it deletes. In production at tensorone.cloud.
Read more → By invitation Cerebro Threat intelligence · Offensive servicesA cyber threat intelligence platform built around the Allied Tradecraft Ring: an operator desk that turns one firm's incident into a hunt every member can run. Penetration testing is delivered under Cerebro.
Read more → Enrolling Crimson Academy Training · Cybersecurity, IT & programmingTwenty-four courses across five tracks, from your first terminal command through threat hunting, penetration testing, and hypervisor security. Level One assumes no prior experience.
Read more →Consulting
The only service PenCrimson delivers directly. The desk scopes the problem, states what it is, and routes it to whichever company is built for it. Where none of them fits, we run the engagement ourselves.
Architecture & exposure review
Where the estate is exposed, ranked by how an operator would use it rather than by scanner severity.
Detection & visibility strategy
What you can see, what you can't, and the cheapest order to close the gaps. Often the answer is a product. Sometimes it's a config change.
Incident readiness
Playbooks, evidence handling, and the decisions you'll have to make at 3 a.m., rehearsed before you have to make them.
Executive & board advisory
Straight answers on risk, spend, and vendors from people who have sat on the other side of the wire.
Leadership
PenCrimson and every company under it is run by the same two people. Both spent their careers on the offensive side of the work.
U.S. Army veteran with over a decade of technical and leadership experience at the National Security Agency and multiple Fortune 100 companies. Threat hunting, cyber threat intelligence, penetration testing, and vulnerability research.
Decorated U.S. Marine Corps veteran with two decades of experience designing security protocols for U.S. government agency facilities at home and abroad. Defense-in-depth strategy and strategic engagement.
Get in touch
One conversation. We will tell you whether it is a TensorOne problem, a Cerebro problem, a training problem or a consulting engagement, and roughly what it would take.