Villa Capri
Italian restaurant & cocktail lounge. New website in development.

Independent cyber risk assurance · United Kingdom
Research-grade threat modelling and risk assurance for connected vehicles, space systems, digital identity and agentic AI — so you can show your systems are trustworthy, not just say it.
Image: NASA
Published in IEEE·Elsevier·MDPI·Springer·Frontiers
Why DeTrust
Connected vehicles, national identity platforms and autonomous AI are being deployed into safety-critical settings — often before anyone can show they are trustworthy.
DeTrust closes that gap with research-grade methods, delivered directly by the founder: no sales tier, no junior bench, and every recommendation traceable to published evidence.
How we work
A focused conversation about your system, your obligations and what “trustworthy” has to mean for your stakeholders.
We map assets, trust domains and adversaries into a structured threat model — STRIDE, TARA and MITRE ATT&CK.
Risks are rated by impact and likelihood and tied to the standards you answer to — ISO 27001/27005, ISO/SAE 21434, NIST CSF.
You receive a prioritised mitigation plan and evidence your board, auditors or regulator can check for themselves.
Expertise
Six domains where the founder has published, delivered and been cited — each with its own methods and evidence.

Threat analysis and risk assessment for V2X and cloud-assisted vehicle functions, aligned with ISO/SAE 21434.
Explore
Threat catalogues and teleoperation security for missions where failure is not an option.
Explore
Evidence that citizen-scale registration and authentication layers are safe to rely on.
Explore
Loss-of-control, oversight and decision-authority risks assessed before autonomous AI goes live.
Explore
Sector vulnerability patterns turned into priorities your board can act on.
Explore
Threat modelling for permissioned ledgers that trace critical minerals through the supply chain.
ExploreWhat you get
Threat modelling and risk assessment (TARA) that turn attacker models into concrete, prioritised mitigations.
Security for what is new — connected vehicles, agentic AI and digital identity — assessed before you ship.
Advice traceable to 21 publications and public reports, with 170+ citations you can check.
Governance that catches up with the systems you have already deployed.
Alignment to ISO 27001/27005, NIST CSF, NCSC guidance and DORA — obligations turned into evidence.
Research impact
Three stories from the founder's research career — the methods DeTrust now brings to your organisation.

On a Gates Foundation-funded programme, authored 50+ standard operating procedures and a public threat, risk and mitigation taxonomy for national digital identity systems. The published analysis drew 20+ governments from the Global South to security workshops.
50+ SOPs20+ governments engagedRead more
Co-authored TARA+, a controllability-aware threat analysis method for Level-3 automated driving on the EU L3Pilot programme, then an EPSRC–Jaguar Land Rover funded PhD on detecting adversarial vehicle-to-vehicle messages.
TARA+ · 30 citationsIEEE Intelligent Vehicles 2019Read more
Developed a threat catalogue for European Space Agency missions and analysed the security of teleoperated robots — published in Advances in Space Research.
ESA SSE4SPACE22 citationsRead moreDelivered in the founder's prior roles; the organisations named are not DeTrust clients and do not endorse DeTrust.
Insights & recognition
Global Talent Mentoring, Hamdan Bin Rashid Al Maktoum Foundation (under UNESCO).
Read the featureA cross-sector CVE/CWE analysis — healthcare is dominated by SQL injection.
Read the reportWhat attackers target in national identity systems, and which mitigations pay off.
Read the report
The founder
A practitioner-researcher with a decade of security work on national-scale systems. Every engagement is scoped and delivered by the founder.
Listed as the founder's prior experience. These organisations are not DeTrust clients and do not endorse DeTrust.
Delivered by DeTrust
Security-hardened, fast and accessible websites for independent hospitality businesses in Royal Leamington Spa.

Riverside bar & restaurant. Complete website: menus, private dining, gift cards and seasonal events.
Visit the site
Cocktail bar, late-night club and membership venue. Website design and build.
Visit the siteItalian restaurant & cocktail lounge. New website in development.
Tell the founder what you're working on. Every enquiry is read and answered personally.
Photography: NASA (Earth at night, Canadarm2, Dextre) and Unsplash contributors. Client imagery from the client websites shown.