Lompoc · Santa Barbara County · Central Coast
A security specialist for the smart stuff on your network.
The fog burns off by noon on the Central Coast. The weak spots on your business network stick around. I help you find and close them.
Not sure where to start? Take the free 2-minute Security Self-Check.
Free initial consult. Scope and fee in writing before any paid work.
Jacob also co-maintains Palisade, a free offline evidence compiler, and is building Verdict: see both tools.
Based in Lompoc. On site across the county. Every town we serve
Built by Keith Systems
The same habits behind every engagement, built into software: work offline, keep sensitive data on machines you control, and show the reasoning so a person can check it.
Turns scan exports, STIG checklists and inventory sheets into control-mapped evidence, entirely inside your browser.
Runs in your browser, nothing leaves your machine. Please don't enter CUI.
Designed to map evidence to NIST, CMMC and HIPAA requirements and propose a determination with its reasoning shown.
The niche
Count what has an IP address in almost any small business between Guadalupe and Goleta: the printer, the thermostat, the waiting-room TV, the point-of-sale tablet, the cameras and door controllers, the cold-room temperature sensor. It all shares a network with the computer that holds your patient charts, client tax returns or contract drawings, and it gets far less attention than your laptops. That smart stuff is usually the soft spot.
I'm the security expert for the smart stuff on your network, and I work from the network side only: your own network gear, accounts and written policies. That covers segmentation, firewall rule review, separate guest and device Wi-Fi, DNS filtering, MFA and account review, and an external exposure review with your written authorization. The goal is to make it much harder for one compromised gadget to reach the systems that matter.
What I don't do: work on the devices themselves, sell or recommend equipment, or refer you to contractors.
Network side only. Device work belongs to whoever you hire directly; check any California contractor at cslb.ca.gov.
Who we help
Fog off the coast. Vineyards inland. Soft spots on the network in between.Keith Systems · Lompoc, California
Services
How it works
About 30 minutes by phone or video about your business, your data, what's on your network and what worries you. No obligation. Book a free security consult.
If it's a good fit, you get a written scope covering what I'll do, what I won't, and the fee, before any work begins.
Segmentation design, firewall rule review, account and MFA review, written requirements and plans, on your own network gear and accounts, remotely or on site.
A written summary of what I found, what changed and what to do next, ranked so your team or IT provider knows where to start.
Background
Researcher
Finding bugs in other people's software and reporting them quietly so the vendor can fix them first teaches one habit: assume the documentation is wrong and check what the system actually does. I bring that to your network. With your written authorization, I look at it the way an outsider would, from the internet inward, and write findings the way a vendor's security team wants them: clear, reproducible and ranked by real impact, not padded to look scary.
Service area
Most people who call aren't sure what they need yet, and that's fine. Call (805) 800-8163 or send a message. If it's not my kind of work, I'll tell you and point you in the right direction.
A few plain facts: I don't install, wire or sell cameras, alarms or other equipment (more here). I'm not a C3PAO, CMMC assessor or authorizing official, and I don't issue certifications. And I'm not a law firm.
Questions
It depends on your size, locations, accounts and what needs review, so I don't publish prices. After the free consult you get a written scope with the fee before any work begins. See what to expect from the free security consult.
No. Keith Systems is not a C3PAO or CMMC assessor and does not certify anyone. I provide readiness help only. For where CMMC stands, see the CMMC Level 2 readiness guide.
No. I'm not a managed IT shop. I assess, plan and work on the network side, then hand your team or IT provider written, prioritized findings. See cybersecurity assessment vs. managed IT.
MFA on email and every admin account, offline or immutable backups tested by actually restoring, and moving guest Wi-Fi and connected devices off your business network. Cyber insurers commonly ask about the first two. Start with the Microsoft 365 security checklist.
Book it
Tell me roughly what you run and what is on your mind. The fastest route is the phone, but the form gets to the same place.
Not sure if we're a fit? Call (805) 800-8163 or send a message anyway. If it's not something I do, I'll say so and help you figure out where to look.