OppiSec exists to enable organisations to stay secure in an increasingly complex threat landscape. Built on a strong heritage of working in government and backed by extensive real-world experience, we partner with public sector bodies and high-growth technology companies to reduce cyber risk, meet regulatory demands, and respond to threats with speed and confidence. Our team combines senior strategic insight with deep technical expertise to deliver security that is practical, effective, and built to last.
Edward Hall
Co Founder
Ed leads OppiSec’s advisory practice, he brings deep experience advising Government, science and technology organisations on complex cyber security challenges. His background spans strategic advisory, regulatory assurance, large-scale security transformation programmes and security operations. He has proven experience in helping leadership teams understand cyber risk clearly and translates it into practical, effective security outcomes.
Daniel Garbutt
Founder
Dan oversees client delivery and technical assurance. He has extensive hands-on experience securing modern technology environments. Having led technical programmes across cloud, digital platforms, and high-growth organisations, he specialises in building resilient security architecture that supports innovation. His approach combines technical depth with pragmatic delivery, ensuring security works in the real world.
Our Services
Regulatory & Assurance
Cyber Essentials and Cyber Essentials Plus, ISO 27001, NHS DSPT, and NIS2 readiness—alongside supplier assurance and security due diligence.
Supply Chain Security
Third-party risk management, supplier assurance frameworks, and contractual security requirements for buyers and vendors.
Security Leadership
Fractional CISO leadership delivering security strategy, roadmaps, risk management, budget planning, and board-level reporting.
Incident Readiness & Response
Incident response playbooks, tabletop exercises, and surge support during cyber investigations and active incidents.
Engineering & Cloud Security
Secure architecture and design reviews, AWS and Azure cloud hardening, identity and access management, and security monitoring.
Our Certifications