Every issue, in order.
Running a company on loops and gates, written down as it happened, by the person it happened to.
Showing all issues.
2026 3 issues
August 2026
May 2026
March 2026
2025 4 issues
August 2025
April 2025
March 2025
- Building Lean Security in PublicThe rebrand explained as a three-rung ladder: do it yourself, do it with you, do it for you. And why the method was refined in public instead of behind closed doors.
- Lean SecurityThe shift from general security consulting to Lean Security: lean principles aimed at cutting waste and friction out of the security function, with a book being written alongside it.
Earlier 2023
Writing from before this company8 posts from an earlier business, written before this one existed. Kept here because that work is part of how I got to this.
- How Building and Selling Products Can Help Boost ProfitsServices bill time; products do not. The case for a solo operator running both: better margins, recurring subscription revenue, credibility in the niche, and an asset someone could buy.
- The Power of Expert SecurityWhat a virtual CISO actually does, and the case for a small practice holding client data to have one: GDPR and CCPA exposure, incident response, and security as a visible selling point.
- The Dual Force of Action and FocusMomentum comes from starting, direction comes from declining most of what is on offer. The case for pairing consistent action with a narrow focus, and for cutting the multitasking.
- The Power of DecisionsWorking solo means no committee to hide behind. What niche, which clients to decline, hourly versus value pricing: the choices that quietly set the shape of the business.
- Effective Guide to Conducting Market ResearchA working list of low-cost ways to learn what buyers actually struggle with: surveys, polls, interviews, keyword research, forums. And the rule that matters most, set a time limit and move.
- Craft an Effective Go-To-Market StrategyA step-by-step go-to-market plan for a new consulting practice, built on picking a niche over staying a generalist, with penetration testing and virtual CISO work as worked examples.
- How to Get Started in ConsultingThe low-risk version of starting out: keep the job, sell before you incorporate. Plus the line between billing hours as a contractor and being paid for value as a consultant.
- Don't Underestimate the Value of RelationshipsCompetence is assumed. Relationships are the part most people leave to memory, and the argument here is that a network only compounds when a CRM makes the follow-up systematic.
Full archive available as RSS and JSON FeedShort versions cross-posted to Substack, canonical here
The newsletter
Get the next one by email
The full issue lands in your inbox. At least one a week, more when the week produces more.
Double opt-in. One click to leave, in every message. You get the newsletter and the occasional note on what I'm building. I hate spam too: your address is never sold, and nobody else markets to it.
