White-glove security engineering

A senior engineer for your security tools, on your team.

Bold City Cyber works as an extension of your team, keeping Tanium, Qualys and CrowdStrike fully deployed, tuned and up to date. Every engagement is led by Travis, a former TAM for all three platforms, with cloud and AI security when you need it.

Works in your Slack or Teams Founder-led engagements Reply in 1 business day
Weekly platform reviewThis week on Tanium
Client health97.8%+3.1 pts this month
Patch compliance94%Ring 2 rolling out
Endpoints reporting2,140of 2,180 in the last 24 hrs
Done this week
  • Fixed 31 clients with expired certificates
  • Pushed October patches to ring 2
  • Built an asset-owner report for IT leads
Next upPlan the Tanium Cloud migration window
Your engineer: TravisShared Slack or Teams channel · monthly health report
Example of a weekly updateIllustrative
10 yrsin cybersecurity and cloud
3platforms supported from the vendor side
Founder-ledon every engagement
30 daysnotice to cancel any plan

Buying the tools was the easy part.

Most companies own good security platforms. The value only shows up when they stay fully deployed, tuned and maintained, and that's where things slip: sensors that stopped reporting, patch waves that stall, scans that skip half the network, and alerts nobody trusts. Bold City Cyber becomes the engineer behind your tools, so they keep doing the job you bought them for.

Services

One core service. Two that round it out.

Each starts with a fixed-price assessment, quoted after a free 30-minute call, so you see every gap before committing. A monthly plan keeps things clean after that.

01 · Core serviceExtension of your team

Security Platform Care

Tanium · Qualys · CrowdStrike

White-glove engineering for the security platforms you already own. A senior engineer who knows these tools from the vendor side works inside your team, in your channels and your change process, and keeps them doing the job you bought them for.

  • Deployment health and coverage gaps
  • Policy, detection and scan tuning
  • Patch and vulnerability workflows that close
  • Upgrades, migrations and admin backup
Start with an assessment
Platform Health Check1–2 weeks, one platform. Coverage, config and usage report.
Multi-Platform Health Check2–3 weeks. Two or three platforms reviewed together, including the gaps between them.
Then stay covered
Dedicated Platform EngineerA named senior engineer each month for health reviews, tuning, upgrades, admin backup and a quarterly roadmap. Sized to your platforms and endpoints.
Start with a health check →
02

Cloud Security Engineering

AWS · Azure · Google Cloud

Hands-on cloud engineering with security built in. Environments designed, built and hardened, with infrastructure as code your team can maintain.

  • Landing zones and account structure
  • IAM cleanup and least-privilege roles
  • Terraform modules and guardrails
  • Logging, alerting and CSPM tuning
Start with an assessment
Cloud Security Baseline2 weeks, one cloud. Review, findings and a prioritized fix plan.
Multi-Cloud Security Review3 weeks, AWS, Azure and Google Cloud. One view of risk across every account.
Then stay covered
Fractional Cloud EngineerMonthly builds, fixes, drift reviews and on-call help.
Get started
03

AI Security

LLM apps · AI agents · AI policy

Find where AI is in use across your company, lock down the AI apps you ship, and put an AI policy in place that people actually follow.

  • AI usage inventory and shadow AI review
  • LLM app testing against the OWASP LLM Top 10
  • Guardrails for Bedrock, Azure OpenAI and Vertex
  • Policy mapped to the NIST AI RMF
Start with an assessment
AI Usage & Policy Review2 weeks. Shadow AI inventory, risk review and an AI use policy.
AI App Security Assessment2–3 weeks. Threat model and hands-on testing of one LLM app or agent.
Then stay covered
AI Security OversightReview new AI apps and vendors before they go live.
Get started

Recent work

Real problems, measurable fixes.

Example engagements showing the kind of work and results to expect. Replace these with real client results before launch.

It feels like the engineer who should have come with our tools is finally on our team. Our coverage gaps closed in weeks, and we always know what is being worked on.

Example quoteIT Director, logistics company
LogisticsSecurity Platform Care

Full CrowdStrike coverage for a logistics company

Warehouse and terminal servers were built from old images without the sensor, two host groups sat in detect-only mode, and sensors lagged releases. The fix: corrected images, every group moved to Protect and a sane update policy, handled by a dedicated engineer.

84% → 99.6%
endpoint sensor coverage
5 of 5
host groups in Protect mode

~1,800 endpoints · Dedicated Platform Engineer

TechnologySecurity Platform Care

Closing the patch loop for a technology company

Qualys found vulnerabilities and Tanium could patch them, but nothing connected the two, so critical findings sat open for months. The fix: findings linked to Tanium patch waves and the ticket queue, plus scan tuning so the security team finally trusted the numbers.

212 → 9
critical findings past SLA
30 → 9 days
average time to patch

~900 endpoints · Multi-Platform Health Check, then monthly

HealthcareCloud Security Engineering

Locking down AWS for a healthcare network

Their AWS footprint grew one project at a time, with shared admin logins, public storage and logging that was never turned on. The fix: a multi-account landing zone in Terraform, SSO with least-privilege roles, and centralized audit logs across every account.

11 → 0
publicly readable storage buckets
6 weeks
to an audit-ready landing zone

4 clinics · Cloud Security Baseline, then Fractional Cloud Engineer

Meet the founder

I've been on the vendor side. Now I'm on yours.

I'm Travis. I've spent ten years in cybersecurity and cloud, including time as a Technical Account Manager for Tanium, Qualys and CrowdStrike, helping enterprise teams deploy, tune and get real value from those platforms.

I started Bold City Cyber in Jacksonville to give growing companies the senior, hands-on attention large enterprises get from their vendors. I lead every engagement myself, and as the team grows, that won't change.

Tanium · Qualys · CrowdStrikeAWS · Azure · Google CloudTerraformAI security

What you get

You'll always know what's being worked on.

Working with Bold City Cyber feels like having a senior engineer on staff. The work is visible from the first week: a clear report to start, then a steady rhythm of updates, calls and reviews with the engineer doing the work.

  • 01Week 1–2A health check report: a one-page summary for leadership, and every finding ranked with an owner and a fix date.
  • 02Every weekUpdates in your Slack or Teams on what changed, what's next and anything that needs a decision.
  • 03Bi-weekly or monthlyCadence calls with your engineer to review open work and plan the next sprint.
  • 04Every monthA short platform health report: coverage, patching, open findings and trends.
  • 05Every quarterA review of progress, risk and the roadmap ahead, ready to share with leadership.

Process

From first call to steady coverage.

01

Intro call

Week 0 · 30 minutes

Your environment, your tools and your biggest worries. You'll know if it's a fit by the end of the call.

→ Scoped proposal in 2 days
02

Fixed-price assessment

Weeks 1–3

A hands-on review of your security platforms, cloud or AI apps, done with your team. Quick wins get fixed along the way.

→ Report and walkthrough
03

Monthly plan

Ongoing

A dedicated engineer each month for tuning, upgrades and admin backup, working in your channels, plus a short health report.

→ Monthly health report

Why Bold City Cyber

Senior engineering, nothing lost in handoff.

An extension of your team

Work happens in your Slack or Teams, your ticketing and your change process, like a senior engineer on staff, without the hiring cost.

Inside knowledge of your security tools

Founded by a former Tanium, Qualys and CrowdStrike TAM who saw how the best customers ran these platforms, and where most deployments quietly fall short.

Fixes, not just findings

Every finding comes with the fix. Policies, tuning, patch waves and upgrades are done hands-on, then documented so your team can own them.

Founder-led, upfront terms

Every engagement is led by Travis, not handed to a junior team. Fixed-price assessments, flat monthly plans, no license reselling, and 30 days' notice to cancel.

FAQ

Common questions.

Something else on your mind? Send a note and I'll answer within a business day.

Q.01What does a dedicated platform engineer do?

Think of it as the TAM and senior admin your security tools should have come with, working as part of your team. You get a set number of hours each month for health reviews, tuning, upgrades, admin backup and roadmap planning, in your Slack or Teams, on a flat monthly fee.

Q.02How much does it cost?

Every assessment is a fixed price, so there are no surprise invoices. After a free 30-minute call I send a written quote within two business days. Price depends on the size of your environment and how many platforms or clouds are in scope. Monthly plans are a flat fee you can cancel with 30 days' notice.

Q.03Who is a good fit?

Companies with roughly 50 to 2,000 employees that own Tanium, Qualys or CrowdStrike and want more out of them, often running on AWS, Azure or Google Cloud too. Usually a small IT or security team that needs senior help without a full-time hire.

Q.04Do I need to buy a monthly plan?

No. Every engagement starts with a fixed-price assessment and the report is yours to keep. The monthly plan is there if you want help keeping things from drifting.

Q.05Can you work alongside our MSP or IT team?

Yes. I work inside your existing ticketing and change process and hand off documentation so your team can own everything I build.

Q.06What does AI security cover?

Two things: making sure staff use AI tools safely, and testing and hardening the AI apps your company builds, including chatbots, agents and anything connected to your data.

Q.07Are you affiliated with Tanium, Qualys or CrowdStrike?

No. Bold City Cyber is independent and doesn't resell licenses, so recommendations are based on what's right for your environment, not on selling you more product.

Contact

Let's find the gaps before someone else does.

Tell me a bit about your environment. I'll reply within one business day with a few times to talk.

hello@boldcitycyber.com

Jacksonville, FL · Working with teams across the US

No sales pitch. One business day reply.