For VCs
Pre-investment diligence and ongoing risk review across your portfolio. One trusted advisor who translates between technical teams, legal, and executive audiences.
More for VCs →
RuneSight Security / Washington State
Senior cybersecurity advisory that fits your stage.
vCISO and cybersecurity advisory for venture capital firms and startups.
CMMC Level 1 readiness for small defense contractors and federal vendors.
CJIS compliance advisory for law enforcement agencies and public safety tech.
24+ years
in cybersecurity
CISO leadership
experience at scale
10 years Navy
technical background
01 / Who this is for
Three audiences, one advisor.
Different buyers, different pressures, same need: senior security judgment without the cost or drag of a full-time hire.
For Startups
Customer security reviews, enterprise sales scrutiny, audit prep, and AI governance. Senior guidance at the cadence your team can actually absorb.
More for startups →For SMBs & LEAs
Small and mid-size defense contractors, federal vendors, and law enforcement agencies. Compliance work that fits a real budget and a real timeline.
More for SMBs & LEAs →
02 / Services
What you can actually hire us for.
Fixed-fee engagements for one-time work. Monthly retainers when you need a CISO in the room without paying for one full-time.
vCISO and Fractional CISO
Ongoing senior security leadership, recurring strategy calls, and risk roadmap ownership for teams without a full-time CISO.
Learn more →Security Audit in a Day
Fast, fixed-scope posture review. Top ten prioritized risks and a ninety-day action plan delivered in a week.
Learn more →AI Governance and Risk Review
Practical governance for teams using LLMs, copilots, and AI tools without data controls in place.
Learn more →Customer Trust Acceleration
Trust documentation, reusable questionnaire responses, and prioritized gap remediation for enterprise sales motion.
Learn more →CMMC Level 1 Readiness
Gap assessment, remediation roadmap, and SSP starter for the seventeen practices that protect Federal Contract Information.
Learn more →CJIS Compliance Advisory
Data flow review, gap assessment, and remediation for any software that touches Criminal Justice Information.
Learn more →
03 / Why RuneSight
Security work that respects what you are actually building.
Twenty-four years of pattern matching, applied to your specific stage and stakes.
Background
- 24+ years in technology and cybersecurity
- CISO-level leadership experience
- 10 years Navy technical background
- Part 107 certified commercial drone pilot
- Deep familiarity with startup and VC environments
What sets this apart
- Practical guidance, not compliance theater
- Clear prioritization for teams without unlimited resources
- Fluent across technical, legal, regulatory, and executive audiences
- Federal compliance expertise applied in founder-friendly terms
- Delivery that fits your stage, not an enterprise template
Twenty minutes is enough to figure out if there is a fit.
Book a no-pressure intro call or send over a scope and we will get back to you within one business day.