A closed practice for security research, intelligence, and problems without off-the-shelf answers. We take a handful of engagements a year and turn down the rest. We don't pitch, and we don't chase.
CMMC Level 1 readiness assessments for defense contractors. OSINT investigations and field research. Intelligence data products built from real collection. Senior operators only. No junior handoffs, no discovery theater, no retainer traps.
Net Works LLC is a closed-practice cybersecurity firm. We don't take every client, and we don't chase every trend. What follows is the record: entity, affiliations, research output, and the standards we hold ourselves to.
Senior operators. Nothing else. Nobody here sells work they won't personally execute. The person who scopes your engagement is the person on the keyboard, running tooling we wrote and infrastructure we own. No junior analysts, no subcontractors, no playbooks. If you want a team of twenty and a weekly status deck, we're the wrong call. If you want the two or three people who can actually break the problem, keep reading.
We're affiliated with the Observatory for Digital Infrastructure & Network Transparency (ODINT), a 501(c)(3) nonprofit focused on open-source intelligence research against foreign government infrastructure and credential exposure ecosystems. ODINT's research underpins many of the data products Net Works sells commercially. Keeping that research nonprofit and transparent is how we stay trusted.
Proceeds from Net Works commercial work fund ODINT research. This isn't marketing. It's the operating model.
Our operators publish on Substack, Medium, and LinkedIn under the topics below. Linking to specific articles on this page would date them faster than we'd like; if you want the current list, reach out.
Active CFP submissions across DEFCON, BSides, RSA, and regional security conferences. We speak when the talk would say something a vendor session can't. Private roster available on request.
We don't actively hire. We occasionally bring on senior operators we've already worked with on engagements where they proved themselves. If you're one of those people, you already know how to reach us. If you're not, start here.
We're not just consultants. We build products, sell data, and license tools. Here's what you can get from us:
Net Works is a closed-practice cybersecurity firm. We don't have a sales team, a marketing department, or a booth at RSA. We have keyboards and a very specific set of skills.
Every engagement is handled directly by the people doing the work. No handoffs. No junior analysts running your pentest from a playbook. You get senior operators from start to finish.
We built our own tools. We run our own infrastructure. We collect our own data. We answer to nobody.
"Be quick, be quiet, and be on time."
-- Kelly Johnson, Skunk Works
Tell us who you are and what you're up against. Every submission is read by an operator. Most receive no reply. We don't need to work with you; if the problem is interesting, we'll reach out. Incomplete submissions are discarded.
All inquiries are reviewed manually. We typically respond within 48 hours. Incomplete submissions will not be reviewed.