Read across a row to see who a capability serves; read down a column to see everything available to you.
How an engagement runs
Stages 1–4 are project work · stage 5 is where most of the risk reduction actually happens
Capability areas
Seven areas, and what you can actually ask for.
Each area below lists concrete engagements — not service categories. If what you need is not listed, it is probably adjacent to something that is.
01
VAPT & Red Teaming
For CISOs · CTOs · Engineering leadership
Offensive assurance across the whole estate. The method is to predict the attack before it lands — mapping blind spots, weaponising them under controlled conditions, and modelling risk in UAT before it reaches production.
Web, mobile and API application penetration testing
Cloud configuration and posture assessment (AWS, Azure, GCP)
Container and Docker environment assessment
Network and infrastructure VAPT, internal and external
Full red team engagement with control-evasion reporting
Secure code review and DevSecOps pipeline assessment
Security leadership on a fractional basis, for organisations that need the function before they can justify the headcount. Cyber budget framed as deterrence ROI rather than overhead.
Fractional CISO retainer with defined reporting cadence
Security strategy and multi-year roadmap
Long-range cyber budget modelling and spend optimisation
Board and audit-committee reporting packs
Security steering committee leadership or participation
Pre-IPO and listed-company security diligence readiness
Series A, B and C investor diligence support
Incident response readiness and tabletop exercises
For law enforcement · Nodal agencies · Government · Enterprise legal
Casework and capability-building with agencies including CERT-In, NCIIPC, state police cyber cells and the Ministry of Home Affairs — beginning with the National Cyber Defence Research Centre at the age of 15.
Digital forensics — disk, memory and mobile
Case support and investigative assistance for cyber cells
Evidence handling and chain-of-custody advisory
OSINT, attribution and threat-actor tracking
Financial and job-fraud trail analysis
Malware triage and artefact reconstruction
Policy-level governance recommendations for national cyber posture
Capability-building programmes for investigating officers
Expert advisory on critical information infrastructure protection
For security teams · Engineering · SOC · Officers · Executives
More than 25,000 professionals trained to date. Delivered in-person or remote, scoped to the estate the team actually defends rather than a generic syllabus. Full course matrix below.
Offensive track — ethical hacking, VAPT and exploitation
Defensive track — detection engineering, SOC and blue team
Forensics track — DFIR and evidence handling
Secure engineering track — secure code and DevSecOps
Executive track — board-level cyber briefings and tabletops
For media companies · Conference organisers · Trade bodies
Advisory roles across GISEC, GITEX, InterSec, BlackHat Middle East, FCRF, CyberX, CSI Cyber-FiFC and InfoComm. Scaling an event end to end through a network reaching 15,000+ security professionals.
Senior keynote and panel speaker acquisition
Agenda and track design
Community and knowledge partner brokering
Embassy and consulate partnerships — Israel, EU, UK, US
Sponsor and exhibitor pipeline development
Delegate registration growth via social and media coverage
Building resilient detection pipelines — telemetry, correlation and context. Writing detections that survive an attacker who knows they exist.
Audience — SOC analysts, detection engineers, IR teamsIndicative — 3–4 days · purple-team exercise
Forensics
Digital Forensics & Incident Response
Disk, memory and mobile forensics, evidence handling and chain of custody. Delivered for both enterprise IR teams and investigating officers.
Audience — IR teams, LEA officers, internal auditIndicative — 3–5 days · case-based
Secure engineering
Secure Code & DevSecOps
Threat modelling, secure coding patterns and pipeline security for the people who will actually fix the findings.
Audience — developers, DevOps, architectsIndicative — 2–3 days · language-specific
Executive
Board Briefing & Crisis Tabletop
What a breach looks like from the boardroom: decisions, disclosure, and the questions regulators and press will ask within the first 24 hours.
Audience — boards, CxOs, comms and legalIndicative — half day · scenario-driven
Awareness
Organisation-Wide Cyber Awareness
Phishing simulation with baselining, role-specific modules and measurable susceptibility trends over time.
Audience — all staff, role-segmentedIndicative — ongoing programme
Client recommendations
From the people who engaged us.
“I had the privilege of working closely with Smith Gonsalves and his team during their engagement for Vulnerability Assessments, Penetration Testing, Red Teaming etc. Smith's expertise and meticulous approach to cybersecurity were instrumental in ensuring our systems remained robust and resilient against potential threats.”
Arup Mandal VP — IT, Infosec & Data Privacy, Ather Energy Client · February 2025
“His technical virtuosity is such that he can sniff out the vulnerability time and again. Beyond a shadow of doubt, I will recommend him any time anywhere.”
Sanil N. CISO · Cybersecurity & AI Leader Client · March 2019
Profiles // one page each
Take the relevant profile with you.
Four focused profiles, each written for a specific audience. Useful for circulating internally, attaching to a procurement file, or briefing a panel committee.
