← Work

Expert witness

Technical testimony that a jury can actually follow.

Cybersecurity evidence loses cases when nobody in the room understands it. The work is getting the technical record straight, then explaining it in language that holds up under cross-examination.

Two things tend to go wrong with technical expert evidence. Either the analysis is sound but delivered in language the fact-finder cannot use, or it is delivered clearly but rests on assumptions that do not survive a competent cross-examination.

I work to avoid both. Findings are built from the evidence and stated with the confidence the evidence supports. No more. Where the record is ambiguous, the opinion says so. That position is harder to write and considerably harder to attack.

I also publish original vulnerability research under my own name, including assigned CVEs. That work is public and checkable, which matters when opposing counsel starts testing whether an expert's technical claims hold up.

Matters I take

  • Data breach and incident response disputes
  • Privacy and data-handling claims
  • Patent and intellectual property matters involving security technology
  • Cybercrime and unauthorized access allegations
  • Security negligence and standard-of-care questions

Credentials

  • CISSP
  • CASP+
  • PenTest+
  • CySA+
  • Security+
  • Cloud+
  • Network+
  • CCNA

Full CV, prior testimony history, and rate schedule available on request.

How I work with counsel

Have a matter with a technical dimension?

Schedule a call to talk through the facts and whether I am the right expert for it. If I am not, I will say so.

Discuss a matter