Execution-first security consulting for regulated institutions and organizations building with AI. Based in Ottawa, Canada.
We work where cryptography and AI are changing the risk faster than security programs can adapt — post-quantum readiness for regulated institutions, and the security of AI systems for the teams shipping them. The work is done by the practitioner who scopes it, not handed down to a junior team.
Our advantage is not scale or research — it's clarity, execution, and credibility. We answer one question:
"What do we do on Monday morning with UpSec involved?"
When the answer is obvious, you win.
We don't deliver shelfware. Every engagement produces actionable outputs your team can implement immediately.
Security decisions rooted in your actual architecture, not theoretical frameworks or vendor checklists.
Fifteen years building and breaking systems for financial institutions, and a decade teaching security engineering at a Canadian university. Hands-on experience, not just certifications.
Tell us about your challenges. We'll help you find the right solution.