ntntn.ioSmall business security / Seattle & remote
Find the gaps in your accounts, devices, and backups. Get a clear plan to fix them, and hands-on help when something goes wrong.
Vulnerability scans, recurring security reviews, and incident-response support. Work directly with Trinity Harrison, a GIAC Certified Incident Handler and Forensic Analyst.
Free 15-minute introduction. Scans and response work are quoted after scoping.
Practical coverage for a small team
01 / Vulnerability scans & review
Start with the systems your business relies on. Review internet-facing services, patch status, business email, account access, and backup arrangements within an agreed scope.
You get: authorized scan results, validated findings, business impact, and a prioritized fix list with the limits of the review explained.
02 / Recurring security coverage
Schedule repeat scans, access reviews, patch follow-ups, and checks of your backup and recovery process. Work alongside your IT provider to track remediation and recheck the agreed fixes.
You get: a written review schedule, a current findings list, and progress you can follow. Frequency, systems covered, and response availability are agreed in writing.
03 / Incident response
Investigate suspicious sign-ins, compromised email, malware alerts, or unexpected remote access. Assess available evidence, help plan containment, and coordinate recovery with your IT provider.
You get: an assessment of the available evidence, documented findings, and a recovery plan. Response work starts after availability, scope, and access are confirmed.
Request incident-response help →Testing begins only after written authorization identifies the systems, methods, and testing window. Recurring reviews provide scheduled coverage; 24/7 monitoring and guaranteed response times are not included.
Recent threat reports / Reviewed
These reports show how attackers get in. A review checks which risks apply to your business and what you can do about them.
CISA & partners /
A new SafePay advisory describes attackers using exposed credentials and flaws in internet-facing systems, then targeting data and backups.
Worth checking: remote access, multifactor authentication, edge-device updates, and whether backups are protected from an administrator account takeover.
Read CISA's advisory announcement ↗Huntress / · Updated October 12
Huntress observed attacks against AhsayCBS backup servers that installed webshells and cryptomining software. Its update confirms a hotfix for the initial entry point.
Worth checking: your backup product, its patch status, who can reach its management interface, and evidence that a restore works.
Read the Huntress investigation ↗Microsoft /
Microsoft described phishing that disguised legitimate remote-management installers as invitations, documents, or updates. Attackers used those tools to maintain access to affected devices.
Worth checking: which remote-support tools are approved, who can install software, and how unfamiliar installations are investigated.
Read Microsoft's research ↗From uncertainty to a plan
Explain what your team depends on, what has changed, and whether there are signs of an active incident.
Confirm systems, authorization, access, fees, timing, and how sensitive information will be handled.
Receive prioritized actions, supporting evidence, and an agreed plan for remediation or follow-up.
Your consultant
I'm Trinity Harrison. I hold GCIH, GCFA, GSEC, and GFACT certifications and completed the SANS Applied Cybersecurity Certificate with honors in 2026. I also bring over 25 years of software engineering experience to understanding how systems fit together.
My forensic investigation tool, TRUDI, placed second in the 2026 SANS Find Evil hackathon. My approach is to document what the evidence supports, explain the limits, and give you a practical next step.
Verify credentials and recognition →A useful first step
Tell me about your business, your current IT support, and the concern you want answered. We will identify a useful starting scope and agree on a quote before work begins.
Book a free 15-minute security call →Keep initial booking notes free of passwords, logs, customer records, and other sensitive material. We will agree on a secure way to share what the work requires.