Technology builds
Systems that work on day one and keep working.
I build data, AI, and security systems for organizations that need them to hold up under real conditions: audit, attack, and scale. Track record: GRITS, FLIRT, CRISTAL, and the AI, computer-vision, RF-sensing, and IoT analytics platforms of MTRX, the company I co-founded and led from 2016 to 2024. Client names are shared on request, with permission.
What I build
Surveillance and detection systems
Data pipelines, schema alignment across sources, signal detection, and dashboards built for operations rather than demonstrations. Track record: GRITS and FLIRT.
AI decision support
Retrieval, classification, and evaluation pipelines with human review built in and model performance measured against ground truth, not assumed.
Internal knowledge systems
A private AI assistant over your own documents and data, delivered with a user manual, access controls, and month-to-month operations and support.
Security tooling
Threat models, detection logic, hardening, and verification for systems that will be attacked.
Research and analysis platforms
Reproducible analysis, data provenance, network analysis at scale, and outputs ready for publication or the courtroom.
Criticality and risk models
Methods that rank what matters most when systems fail. Track record: CRISTAL and TACE.
How I work
- Fixed fee with milestone splits and objective acceptance criteria for every deliverable.
- Vendor costs paid by you on your own accounts. No markup.
- The codebase remains the property of Risk Factor Research LLC with a perpetual, irrevocable, royalty-free license for your internal use. Commercialization beyond internal use is negotiated separately, in good faith, with a mutual right of first offer.
- Support by month-to-month maintenance retainer, cancel any time effective at the end of the billing cycle, or flat per-incident when no retainer is active.
Security posture
- Least privilege by default. Secrets never in code.
- Dependencies pinned and reviewed. No telemetry to third parties unless you ask for it.
- Logging and verification designed in, not added after the incident.
Scope a build
Send the problem, the users, and the deadline. You will get a written scope with milestones and a fixed price.