SecurityVP Platform
Security risk, vulnerabilities and threat models in one place.
- Risk register
- Vulnerability management
- AI threat modeling
- AI-assisted code review
Security engineering, from source code to regulation.
SecurityVP builds AI-assisted software for security teams and provides independent cybersecurity consulting: risk management, application security, authorized penetration testing and governance.
Two products, each with one job
One manages your security risk. The other tells you when the rules you answer to have changed.
Normdiffnormdiff
Only the changes that alter your obligations. Silence when nothing did.
A change feed for security standards and regulations: what changed, when it takes effect and who it affects, with a link to the official source.
- PCI DSS
- ISO/IEC 27001
- NIST CSF
- NIST SP 800-53
- NIS2
- DORA
How SecurityVP works
The same principles run through the software and the consulting.
- AI drafts, people decide
- In the platform, AI-proposed verdicts stay proposals until a person confirms them. In Normdiff, every AI-assisted summary links to the official text, and the official text prevails.
- Evidence you can check
- File and line references cited by the AI are checked against the actual code. Every regulatory change links to the document it came from.
- From finding to risk
- Findings from code and cloud scanners land in one triage queue, and the real ones become risk register entries scored the way leadership reads risk.
- Built by a practitioner
- Both products are designed and built by the security engineer who delivers the consulting work, from problems met in that work.
Cybersecurity consulting
Independent, hands-on work from strategy to code. Every engagement is scoped in writing, and testing happens only with written authorization.
- Virtual CISOSecurity leadership on a part-time basis, accountable to your management.
- Application SecurityHands-on review of how your software is designed, built and shipped.
- Authorized Penetration TestingScoped testing of web applications, APIs and infrastructure, only with written authorization.
- Vulnerability Assessment and ManagementA working process for finding, triaging and closing vulnerabilities.
- Security ArchitectureDesign review for cloud platforms, identity and data flows.
- Secure SDLCSecurity built into the way your team already works.
- Security Governance and Risk ManagementGovernance that maps to recognized frameworks without becoming paperwork.
- Security Operations and Incident ResponsePreparation for incidents and support when one happens.
- AI-Assisted Security EngineeringPractical use of AI in security work, with people kept in control of decisions.
Led by a practitioner
SecurityVP is run by Oleksii Kushniruk, an independent security professional with more than ten years of experience, from CISO-level leadership to application security, penetration testing and security engineering.
About the founder and the business- OSCP
- OffSec Certified Professional
- OSWE
- OffSec Web Expert
- Focus
- Security leadership, application security, offensive security, architecture, governance
Tell us what you are trying to secure.
A short email is enough. You will get a reply from the person who would do the work.