Cybersecurity
Rook Advisors, LLC is a managed cybersecurity and technology provider. For nine years we have served as the security team for professional firms, healthcare practices, construction companies, nonprofits, and federal contractors.
We operate the controls we recommend: detection, response, email security, patching, backup, and compliance evidence. Then we test them the way an attacker would.
Monitoring
24/7
Managed endpoints
1,400+
In operation
9 years
What we provide
Each service runs continuously on every client environment we manage. They are not projects that end at go-live.
Managed detection and response
Endpoint detection and response on every managed device, monitored around the clock by a staffed security operations center. Our engineers investigate each incident, contain it, and remediate it.
Email and collaboration security
Inline protection for Microsoft 365 mail, Teams, OneDrive, and SharePoint against phishing, malware, malicious links, and account takeover, with data-loss controls where required.
Vulnerability management and testing
Continuous patching and vulnerability tracking across every managed endpoint, with findings ranked by real-world risk and closed on a schedule.
Incident response
Engineers on call 24/7 for containment, investigation, and recovery, with clear communication to your leadership, counsel, and insurer, followed by a written post-incident report.
Identity and access
Multi-factor authentication, conditional access, privileged-account controls, and managed password vaults, so that a stolen password is not a breach.
Backup and recovery
Image-based backup with automated boot verification for servers, Microsoft 365 backup, and restore testing, so recovery is proven before it is needed.
Security awareness
Training and phishing exercises that prepare your people for the attacks that actually reach their inboxes.
Compliance and evidence
HIPAA, CMMC Level 2, NIST SP 800-171, and SOC 2 readiness, with the evidence produced by the same team that operates the controls.
Security testing and assessment
We test your defenses from the outside in: the systems you expose to the internet, the applications your clients sign in to, the people who answer your phones, and the doors to your office.
Every engagement is scoped and authorized in writing before testing begins, and every finding is validated by hand before it reaches your report.
External penetration testing
Reconnaissance and testing of internet-facing systems and services to find what an outside attacker could reach and exploit.
Web application testing
Authenticated and unauthenticated testing with Burp Suite Professional and manual techniques: authentication, authorization, session handling, injection, and business logic.
Vulnerability assessment
Tenable Nessus Professional scanning of networks and applications, with every result validated and ranked by real-world risk instead of delivered as raw scanner output.
Social engineering assessment
Phishing campaigns, pretext phone calls, and in-person pretexting that measure how your people respond to the approaches attackers actually use.
Physical security assessment
Review of facility access control, visitor handling, badge and key practices, and tailgating exposure, informed by federal physical-security oversight.
Remediation validation
A retest after fixes are in place, so you have evidence that each finding is closed.
Testing leadership
Our social engineering and physical security work is led by a former U.S. Army Special Forces communications specialist who went on to serve 22 years as a U.S. Department of Energy Federal Security Officer.
At DOE he oversaw physical, cyber, information, and operational security for Department operations and nuclear-material transportation, and led CMMC Level 2 implementation work. He is trained as a Social Engineering Specialist.
How we operate
Security is only as good as the people running it at 2 a.m. These commitments hold for every client, regardless of size.
People, not a queue
Every engineer is a full-time Rook employee in Albuquerque. Nothing is offshored, and a named principal answers for your environment.
Human review
Automation and AI help us see more and move faster. No automated finding changes a client system without review by a Rook engineer.
Federal discipline
Our security and compliance leadership includes a former U.S. Department of Energy Federal Security Officer with more than two decades of federal security program oversight.
Regulated work
Legal, accounting, healthcare, and defense clients hold us to their standards. We document our work so it stands up to auditors, insurers, and assessors.
Frameworks we support
- HIPAA
- CMMC Level 2
- NIST SP 800-171
- DFARS
- SOC 2 readiness
Technology partners
- Microsoft
- Huntress
- Check Point
- Fortinet
- HPE / Aruba / Juniper
- 1Password
A private introduction
Most engagements begin quietly: an introduction, a measured discussion, and a clear sense of whether there is a fit.
A principal of the firm will reply personally. We respect your time and your discretion.