Nullra Information

Nullra is retained in four situations. The AppSec function collapsed and something ships this week. An audit, acquisition, or incident opened a window and the gaps need to close before external scrutiny arrives. Security exists on paper but nothing is actually happening. Or a firm delivered findings and nothing changed. If one of those fits, reach out. One message. No intake process. If the engagement is appropriate, you'll hear back within 24 hours. Thomas Jost -- ten years building production software before crossing to AppSec. Presented at DEF CON 33 and OWASP AppSec Global on a program failure worth studying publicly. Scope of practice: Secure SDLC design, AppSec tooling & automation, authorization & API security, vulnerability management, CI/CD security (GitHub Actions), AI-in-development risk controls. Minimum engagement: 40 hours. All client relationships are confidential -- not as a policy disclaimer, as a professional commitment. info@nullra.com