TigerNDR is now taking engagements. The pitch is simple: I'm the second opinion — the person a district, city, or county hires to attack their network the way a ransomware crew would, hand over a report their vendor can act on, and then come back and prove the holes are closed.
Here's the gap I keep seeing. Most public-sector networks have never been tested by someone who doesn't also sell them the fix. The vendor who built the stack runs the assessment, grades its own homework, and reports a clean bill of health. The attackers don't grade on a curve. An independent operator with no stake in the remediation contract finds the open door the incumbent has every incentive to overlook.
Two kinds of organizations: the ones that have been hit, and the ones that haven't been hit yet. The only question worth answering is whether someone friendly finds the open door first.
Every engagement runs the same way — signed authorization first, scope agreed in writing, nothing destructive, and a flat price with the retest included. No retainers, no per-seat licensing, no mystery subcontractor on your network at 2 a.m. Just one named operator you can reach.
If you're in Georgia public service and no one independent has ever really tested you — or you just finished a remediation project and want to know whether it held — that's exactly the call to make. — Blaine