Security · Websites · IT

Find the breach. Fix the gaps. Forge stronger defenses.

Hands-on security, website, and IT help for small businesses and individuals. Penetration testing and security assessments, compliance guidance, websites that are built and kept secure, and practical IT support, backed by more than 15 years in the trenches of IT.

Services

What I can do for you

Security, websites, and IT under one roof. Pick a category to see what’s included.

01Cybersecurity Services14 services

Authorized, scoped work only: every test starts with written permission and an agreed scope.

  • Web Application Penetration Testing

    Find exploitable flaws in your web app before attackers do, with prioritized fixes.

  • Network Penetration Testing & Vulnerability Assessment

    A clear picture of weak points across your network and exposed services, ranked by risk.

  • API Security Testing

    Confirm your APIs enforce auth, access control, and input handling the way they should.

  • Cloud Security Review (AWS, Azure, GCP)

    Catch risky permissions, exposed resources, and misconfigurations in your cloud accounts.

  • Active Directory / Windows Domain Security Assessment

    Find the paths an attacker could use to take over your domain, and how to close them.

  • Mobile Application Security Assessment (iOS/Android)

    Know how your app stores data, talks to your backend, and holds up to tampering.

  • Ransomware Readiness Assessment

    See how well you could prevent, withstand, and recover from a ransomware attack.

  • Incident Response Support (remote / advisory)

    Calm, experienced guidance to contain an incident, preserve evidence, and recover.

  • Security Architecture Review

    An expert check that your systems are designed to limit damage when something goes wrong.

  • Threat Modeling

    Map out who might attack you, how, and which defenses matter most.

  • Source Code Review & Secure Code Consulting

    Spot security bugs in your code and get practical guidance for writing safer code.

  • Red Team / Adversary Simulation (scoped)

    A realistic, agreed-scope test of how well your people and defenses detect and respond.

  • Bug Bounty Hunting & Vulnerability Research

    Responsible, in-scope research that uncovers real vulnerabilities, reported clearly.

  • Vulnerability Disclosure Program (VDP) Support

    Set up a simple, safe way for researchers to report issues to you, and handle reports well.

02Compliance & Advisory7 services

Practical guidance that turns frameworks and risk into a plan you can follow.

  • Cybersecurity Risk Assessment

    Understand your biggest security risks and where to spend first.

  • Compliance Gap Analysis (NIST CSF, ISO 27001, SOC 2, PCI DSS, GDPR, etc.)

    See exactly where you stand against a framework and what is left to do.

  • Virtual CISO (vCISO) Advisory

    Senior security leadership on call, without a full-time hire.

  • Cybersecurity Strategy & Roadmap Consulting

    A realistic, prioritized security roadmap that fits your budget and goals.

  • Policy & Procedure Development

    Clear, usable security policies your team can actually follow.

  • Vendor / Third-Party Security Reviews

    Know whether the vendors you rely on handle your data safely.

  • Security Awareness Training (content or delivery)

    Plain-language training that helps your team spot phishing and build safe habits.

03Website & Digital Services10 services

Fast, secure websites that look sharp and stay that way.

  • Custom Website Design & Build

    A professional landing page, business site, or portfolio built to fit your brand.

  • Website Maintenance & Care Plans

    Updates, backups, and monitoring handled, so your site stays healthy and online.

  • Website Redesign & Modernization

    Refresh an outdated site into a modern, mobile-friendly one.

  • WordPress / Webflow / Framer Development & Setup

    Your site set up properly on the platform that suits you, ready to manage yourself.

  • E-commerce Site Setup & Optimization (Shopify, etc.)

    A store that is easy to shop, easy to run, and set up to sell.

  • Security Hardening for Websites

    Security headers, WAF basics, and patching to keep your site from being an easy target.

  • Performance Optimization & Core Web Vitals

    A faster site that keeps visitors around and scores well with search engines.

  • SEO Setup & Ongoing SEO Management

    Solid technical SEO and ongoing tuning so customers can find you.

  • Landing Page Creation for Campaigns or Product Launches

    Focused pages built to convert visitors for a launch or campaign.

  • Website Migration (platform or host changes)

    Move to a new platform or host without losing content, rankings, or uptime.

04IT Consulting9 services

Enterprise-grade know-how, sized for small businesses.

  • IT Consulting & Advisory for Small Businesses

    Straight answers on what tech you need, what you don't, and how to set it up right.

  • Remote IT Support & Troubleshooting

    Get problems diagnosed and fixed quickly, without waiting for an on-site visit.

  • System Administration (Linux, Windows Server)

    Servers configured, patched, and maintained so they run reliably and securely.

  • Cloud Infrastructure Setup & Management

    Cloud environments set up cleanly and kept secure, organized, and cost-aware.

  • Backup & Disaster Recovery Planning

    A tested plan to get your data and systems back when something fails.

  • Network Configuration & Hardening

    A network that is reliable, segmented sensibly, and locked down.

  • Email Security & Domain Configuration (SPF, DKIM, DMARC)

    Stop spoofing of your domain and get your emails delivered to the inbox.

  • Workflow Setup (n8n, Zapier, Make, custom integrations)

    I build workflows that connect your apps and cut repetitive manual tasks for your team.

  • Documentation & Technical Writing

    Clear runbooks, SOPs, and reports your team can rely on.

Retainers & Packages

Ongoing support and fixed-scope packages

Predictable scope, predictable cost. Ask for a quote on any package.

P01

Monthly Website Maintenance Retainer

Ongoing updates, backups, and monitoring for one predictable monthly fee.

P02

Security Health Check

A fixed-scope security assessment with a clear, prioritized report.

P03

Website Launch Package

Design, build, basic security, and SEO in one package, ready to go live.

P04

Quarterly Vulnerability Assessment Package

Regular scheduled testing so new weaknesses are caught early.

P05

Ongoing Security Monitoring & Reporting Retainer

Regular oversight of your security posture with clear periodic reports.

P06

Compliance Readiness Package

A gap analysis plus a remediation roadmap to get you audit-ready.

P07

Bug Bounty Program Management Support

Help scoping, launching, and triaging a bug bounty program.

About the firm

Practical security and technical services

ForgeVanguard Cyber Consulting provides practical cybersecurity and technical services for businesses and individuals. The firm specializes in bug bounty research, penetration testing, vulnerability assessments, and compliance advisory, and also offers website design, development, maintenance, and broader IT consulting.

Every engagement is led by hands-on expertise, supported by streamlined processes that keep work efficient and consistent, with clear findings, actionable recommendations, and direct human oversight throughout.

About Steve

From the workbench to the front line

I help organizations strengthen their security through practical penetration testing, vulnerability research, and compliance-focused assessments, drawing on active experience across major bug bounty platforms. Through ForgeVanguard Cyber Consulting I also deliver website design, development, and maintenance alongside broader IT support. My work combines direct expertise with efficient workflows so clients receive clear, actionable results under consistent human review and control.

I'm Steve Drew, founder of ForgeVanguard, with more than 15 years in IT. I started out repairing and building systems and worked my way up to Senior System Administrator on a Microsoft Azure hybrid enterprise environment protected by Defender XDR, with a focus on digital forensics and incident response (DFIR) and bug bounty work.

Certifications: CompTIA Security+, CompTIA A+, ITIL 4.

Why work with me

Straightforward security, websites, and IT, built on real experience

  • Hands-on background

    Fifteen-plus years of building, fixing, and administering real systems, not just theory.

  • Plain-English results

    You get clear explanations and prioritized next steps you can actually act on.

  • Right-sized help

    Help scaled to small businesses and individuals, without the enterprise price tag or upsell.

  • Discretion first

    Your data, your incidents, and your findings stay confidential.

  • Defender's mindset

    Offensive testing skills are used to make your defenses better, always with permission and a clear scope.

  • Direct contact

    You work with me directly, from first call to final report.

Freelance

Hire me on your platform of choice

Prefer to work through a freelance or bug bounty platform? Find me here, or reach out directly below.

Contact

Request a consultation

Tell me a little about what you need. If you're dealing with an active incident, say so in your message and I'll prioritize it.

Your details are only used to reply to you. See the privacy notice.