Who signs the report
Mike, alias 1n51d3r. INSIDEROPS is the name I work under, not a company. Twenty-five years on the offensive side, split between security leadership, red team operations and forensic expert witness work. A military-origin background followed by a career leading intrusion teams within military-origin cybersecurity consultancies. Also specialised in AI-assisted offensive security and in assessing AI platforms in production: conversational assistants, tool-using agents and RAG systems.
How I work
- I say no when the proposed scope cannot answer the question the client actually has.
- I do not inflate severities to justify fees, nor soften them to avoid discomfort in the boardroom.
- A finding without verified exploitation is labelled potential, and that is stated explicitly.
- The report is defended in person before whoever needs it, including the vendor whose product I broke.
Capabilities
- Offensive
- Red teaming, TIBER-EU, AD intrusion, cloud, wireless, physical
- Industrial
- OT/ICS, IoT, healthcare and plant environments
- Forensic
- DFIR, CSIRT, expert witness, chain of custody
- Compliance
- ENS, NIS2, DORA, ISO 27001, GDPR
- Clearance
- Level permitting the handling of classified information at the highest tier
- Languages
- Native Spanish · Professional English
Career
Independent offensive security consultant
Red teaming, intrusion, OT/ICS, DFIR and expert witness work for healthcare, industrial, financial and public sector clients, with team capacity backed by consultancies of military origin.
Forensic expert witness and teaching
Expert reports and rebuttals for judicial proceedings, court testimony, and technical training in intrusion and digital forensics.
Technical leadership in military-origin cybersecurity
Leading offensive teams within cybersecurity consultancies of military origin: defining methodology, severity criteria and deliverable format.
Spanish Air and Space Force
Training and service in CIS systems and cyber defence. Participation in international exercises, including NATO Locked Shields. That is where the method comes from: written rules of engagement, reporting discipline, and a strict separation between what is observed and what is inferred.
Let's talk about the engagement
If you would rather assess the fit before going into technical detail, a short conversation settles more than an exchange of messages.