Skip to content
Blackhole Cyberstrategy Book a fit call

The advisor

Alex Sellers

Blackhole Cyberstrategy is led by Alex Sellers, a security advisor who works on strategy, governance, risk prioritization, and security programs leaders can understand and sustain. That covers AI governance, SOC 2 and ISO readiness, application and cloud security, vulnerability reduction, tabletop exercises, and executive security planning.

When the scope calls for it, vetted senior practitioners join the engagement under the same terms, and Alex stays your point of contact on the fit call, during the work, and in front of your leadership. Alex uses trusted open-source and vetted vendor tools where they earn their place.

Serves

Small and mid-size US businesses and public-sector organizations

Referred out

Regulated finance, healthcare, and safety-critical operators

Where the work concentrates

01

AI governance: adoption policies, NIST AI RMF-based assessments, and tool approvals leadership can defend to customers and counsel

02

SOC 2, ISO 27001, and ISO 42001: guiding you to audit or attestation readiness without burying your team in paperwork. Alex isn't an auditor, and you choose the audit firm

03

Application and cloud security: risk-ranked work sequenced against engineering capacity. When testing is warranted, Alex recommends and coordinates independent testing firms, which contract with you directly

04

Vulnerability reduction: fewer findings carried from quarter to quarter, each with an owner and an SLA. The pace depends on your engineering capacity, and the plan is sequenced around it

05

Tabletop exercises: incident response and disaster recovery rehearsals built around your actual systems, with an owner for every gap they find

06

First security hire and team build: the business case, role, interview loop, and 30-60-90 plan, plus a Champions program that extends coverage without adding headcount

07

Vendor and SaaS risk: repeatable third-party reviews that turn tool adoption into documented decisions

08

Executive security planning: briefs, budgets, and executive and customer-ready reporting that hold up

Boundaries

Regulated finance, healthcare, and safety-critical operators get a referral to a firm built for that work.

Twenty minutes, one decision.

Bring the decision in front of you, and you'll leave with a straight answer, even if it's no.

Book a fit call