About Keith Systems and Jacob Keith

Why a local, independent security person

Most small offices on the Central Coast get security advice from whoever sells them their computers, their phone system or their monthly IT plan. That advice is often good, but it comes from the same people who would have to fix what an honest review finds. Keith Systems sits on the other side of that table. I do assessments, plans and readiness work, write down what I find in plain English, and leave you free to have whoever you like carry it out.

I live and work in Lompoc. If you are in Lompoc, Vandenberg Village, Mission Hills, Buellton, Solvang or Santa Maria, an on-site visit is a short drive. Santa Barbara, Goleta and southern San Luis Obispo County are regular trips too, and a lot of the work happens just as well over a call.

Credentials you can check

• CISSP from ISC2.
• CompTIA SecurityX, the certification CompTIA formerly called CASP+.
• CompTIA CySA+ (Cybersecurity Analyst).
• Every badge is listed on my public Credly profile, so you do not have to take my word for it.

Behind the letters is about six years of security compliance work on government systems: reading control requirements, mapping them to real networks, writing the documents, and fixing the gaps that an assessor would find.

The researcher habit

On my own time I look for security bugs in other companies' software and report them quietly through coordinated disclosure, on HackerOne (@cratitoes) and to the Microsoft Security Response Center, so the vendor can fix the problem before anyone talks about it. That work teaches one useful habit: assume the documentation is wrong and check what the system actually does. It is the same habit I bring to a dental office's Wi-Fi or a tasting room's payment network.

How I work with you

1. A free first conversation, usually about 30 minutes by phone or video. No sales pitch, and I will not log into anything.
2. If it makes sense to go further, you get a written scope and fee before any paid work starts.
3. Findings come back ranked by real risk, in plain English, with a short list of what to do first.
4. You decide who does the fixes. Your IT provider, your staff, or you.

Not sure whether what you need is something I do? Call (805) 800-8163 or send a message anyway. If it is not, I will say so and help you figure out where to look. You can also take the 2-minute Security Self-Check first.

A few plain facts

Keith Systems is a cybersecurity consultancy. It is not a licensed contractor and does not install, wire or sell cameras, alarms or other equipment (details). It is not a law firm, not a CMMC assessor (C3PAO) and does not certify anyone. It is not affiliated with Vandenberg Space Force Base or any government agency.