Cybersecurity consulting for small teams
Aegis Security Advisors helps small businesses prepare for incidents, test their defenses, and make sense of an investigation when something looks wrong. Work with us directly or through your security partner.
What we offer
Practical security help for small businesses and the security partners who serve them.
Investigation Triage
When something looks wrong, bring in an experienced incident responder. We help you scope what happened, decide what matters, and plan next steps with your team or provider.
- Review of the alerts, logs, and evidence you already have
- Scope and severity: what happened and what is at risk
- Clear containment and next-step recommendations
Penetration Testing
Testing of your network, systems, and applications the way an attacker would, with findings ranked by real-world risk.
- Agreed scope and rules of engagement before any testing
- Findings with evidence and plain-language impact
- Prioritized fixes your team can act on
SOC / IR Playbooks
Incident response playbooks built around your team, your tools, and the threats most likely to hit you. Aligned to NIST SP 800-61 and written to be run under pressure, not filed away.
- Playbooks for business email compromise, ransomware, and payroll and vendor fraud
- Response steps mapped to your people and tools
- A walkthrough with your team so everyone knows their part
Partner Subcontracting
MSPs, MSSPs, and security firms can bring in investigation triage, penetration testing, and playbook and runbook expertise under their own engagements.
- Investigation triage support for your clients
- Penetration testing capacity
- Playbook and runbook development
Tabletop Exercises
A facilitated run-through of an incident, built to test your playbooks before you need them.
Free analyst tools. IOC extractor, email header analyzer, certificate decoder and 17 more, plus an incident response first-hour runbook. Everything runs in your browser.Open the toolbox →
Advice from the person who does the work
Aegis Security Advisors is led by Edward Park, an incident response and threat hunting lead at a major hospital system. The day job is defending against real intrusions. This practice brings that experience to small businesses in Pennsylvania, especially in healthcare and professional services.
No junior consultants and no hand-offs. The person you talk to is the person who triages your investigation, runs the test, and writes the playbooks.
Start with a conversation
A short call to see if we are a fit. No pitch and no obligation, just a straight answer about whether this is worth your money.