DwCyber

Hover a stone.

The piece that makes the rest hold.

Independent adviser and hands-on engineer for cloud, DevOps, security and AI. One person who sees your whole stack, knows what to do about it, and then does it or guides your team to the finish.

Email David or write to contact@dwcyber.com

Where you are

You do not need to know whether this is a cloud problem, a security problem or a people problem. Pick the situation; see what changes.

What changes

Answered with evidence, and the gaps it exposed closed in order of risk, so the next questionnaire is a copy and paste.

Stones involved: Security, Identity, Architecture

Last time: a SaaS vendor's documentation validated against the live product, nine defects found and fixed.

What changes

A written architecture and security position that survives an outside reviewer, with the expensive fixes done before they ask.

Stones involved: Architecture, Security, Cloud, DevOps

Last time: 194 files of a startup's app reviewed read-only, delivered with a decision brief.

What changes

A migration with a rollback for every step and a bill you knew in advance.

Stones involved: Cloud, DevOps, Architecture

Last time: a nonprofit's donations platform rebuilt on AWS, 118 tables and 2.4 GB of donor data moved with zero errors.

What changes

Contained first. Then a plain account of what happened, and the access and monitoring changes that keep it from repeating.

Stones involved: Security, Identity

What changes

Controls that exist in the systems, not only in the policy, and evidence the auditor accepts the first time.

Stones involved: Security, Identity, DevOps

What changes

Rules for what may leave the company, tools chosen on evidence, and automation that cannot leak what matters.

Stones involved: AI advisory, Security, Identity

How an engagement runs

  • A review

    You get findings, evidence and a decision paper.

    weeks

  • A build

    You get the infrastructure, the pipelines and the runbooks.

    months

  • Ongoing advisory

    You get a senior person who already knows your estate.

    standing

What you receive

  • A report where every finding says what was observed and where.
  • Terraform, pipelines and runbooks you own.
  • Decision papers that present the option that is less work for me as fairly as the other.
  • A log of every change made in your environment, written before it ran, with its rollback.

Not technical? You describe the business situation; I do the translation.

Existing developers? I work alongside them and hand over runbooks, not dependencies.

Hebrew? Natively, and English.

Place the keystone.

One email starts it. Say what is going on; I will tell you what I would do first.

David Winston, CISSP and CISM. Leads security operations and architecture for a global SaaS company. Based in Israel, works in Hebrew and English.

contact@dwcyber.com LinkedIn