I break into networks for a living and have opinions about everything else.
Founder of MSP Pentesting. Pentester first, salesperson second, the guy sending invoices at 11pm third. Finishing school this winter, then running the company from the road for most of 2027.
One essay a week on tech, markets, conflict and politics. I try to pick a side and I'm happy to be argued out of it.
Montana, for now
Where I'll be in 2027
Finishing school, then a year on the road with the company in a backpack. Roughly in this order, no dates on purpose. If you'll be in any of these places, or you know someone there I should meet, tell me.
- The Alps Skiing Austria, Switzerland, France and Andorra on an Ikon pass. Winter.
- England A week or so with friends.
- Fort Lauderdale MSP Expo. If you run an MSP and you're going, let's grab a coffee there.
- New Zealand Motorcycle tour of the South Island, then the North Island for surf.
- Australia Surf towns up and down the east coast, a long stay in Sydney, and the F1 Grand Prix in Melbourne.
- Bali and Lombok Surf in the morning, train in the afternoon.
- Thailand Muay Thai fight camp, a couple of months, with a fight at the end.
- Cambodia, Vietnam, Laos Angkor, the Ha Giang loop on a motorbike, Luang Prabang.
- Korea, Taiwan, Japan Japan last, so it can take as long as it wants.
What I run
MSP Pentesting
White label penetration testing for MSPs and GRC firms. We bill you, you add margin, your logo goes on the report. I built it after watching MSP owners lose deals because nobody had given them a clean way to deliver a real pentest under their own name. Manual testing, honest reports, and we never call a vulnerability scan a pentest.
Revenue AI Lab
The side project. AI agents for B2B companies across rank, write, reach and automate. Most of what I learn there about outbound flows straight back into the pentest company.
revenueailab.comThe essays
One a week on tech, markets, conflict and politics, with a take. Free, and replies come straight to me.
0xcady.substack.comWhat I do
Breaking in. External and internal network tests, web apps, Active Directory, and the RMM setups that turn one MSP breach into fifty clients at once. The forgotten admin account, the flat network, the backup server on the open internet with default creds.
Compliance context. SOC 2, HIPAA, PCI DSS, CMMC, NIST. I don't do audit prep, but I know what the auditor is going to ask for and I scope the test so the report answers it.
RF and SDR. Software defined radio and signal capture, the stuff that never shows up in a vulnerability scan. Still learning, always down to compare notes.
Building with AI. Agents and automations for sales, research and delivery. If a task happens twice it gets automated. I write about what works and what didn't.
SEO. I do it for my own companies, so I know which advice is real and which is for selling courses.
Off the clock
Surf (longboard, learning the shortboard). Ski (Ikon pass). Jiu jitsu and Muay Thai, training toward a first fight at a camp in Thailand. Motorcycles, FPV drones, skydiving, duck hunting. I car camp on road trips and look for the spots off the highway.
The plan after the trip is a truck camper up and down the West Coast with a Starlink and no bathroom. If you've done it, I want to hear what you'd change.
Writing
Things I actually use and would tell a friend about. How an MSP breach really happens, what a pentest report should and shouldn't say, what AI agents are good for right now, and where tech, markets and conflict are heading. Short, sourced where I can source it, and with a take.
- Loading…
Get the essays by email. One a week, free, reply to any of them and it comes straight to me.
Say hi
I'd rather meet people than collect followers. DM me on X or LinkedIn, or reply to any essay. I answer.
Especially if you are:
- Running an MSP or a GRC practice and tired of outsourcing pentests to a black box
- A founder working from the road, or thinking about it
- Into surf, jiu jitsu, Muay Thai, drones or radio and somewhere on that map
- Writing about tech, markets or security and want to trade notes