Business Details
20 Years
experience
Trusted Cybersecurity Consulting Services in Seattle
Leviathan Security has been a leader in cybersecurity consulting and risk management for nearly two decades. Our team of battle-tested professionals delivers tailored security solutions to organizations ranging from startups to Fortune 10 companies. We specialize in application and network penetration testing, risk advisory services, hardware security assessments, and vendor security management. Our approach combines manual expertise with industry standards like OWASP Top 10 to uncover vulnerabilities that automated tools miss.We prioritize client collaboration, offering strategic security frameworks, compliance guidance, and ongoing support to build resilient security postures. Our commitment to innovation is reflected in our research contributions, employee expertise, and partnerships with global technology leaders. With headquarters in Seattle and consultants worldwide, we empower clients to navigate complex security challenges while maintaining operational agility.
Services
Web Application Penetration Testing
Secure Code Review
Network Penetration Testing
Risk Advisory Services
VCISO Services
Tabletop Exercises
Hardware Security Assessment
Vendor Security Management
Cloud Application Security
IoT Security Testing
Details
- Year established: 2006
Highlights and features
- We offer 20+ years of hands-on cybersecurity expertise across industries
- Our manual penetration testing uncovers vulnerabilities missed by automated tools
- We provide tailored security strategies aligned with business objectives
- Our team contributes to industry standards and open-source security software
- We maintain transparency with actionable, prioritized remediation guidance
What people say
Exceptionally skilled team
Responsive and thoughtful
Outstanding security partner
Technical expertise
Actionable reports
Services
Web Application Penetration Testing
Our manual penetration testing simulates real-world attacks to uncover hidden vulnerabilities in web applications. Using artisanal attack techniques aligned with OWASP Top 10 standards, we map attack surfaces, identify configuration weaknesses, and prioritize remediation based on business impact. Our experts deliver actionable reports that focus on meaningful security gaps rather than generic findings.
Secure Code Review
We analyze source code for security flaws using manual and automated methods integrated into DevOps pipelines. Our engineers identify systemic vulnerabilities in custom implementations and third-party components, providing remediation guidance that reduces technical debt while maintaining development velocity. This includes cryptographic reviews and security unit testing frameworks.
Network Penetration Testing
Our phased approach combines reconnaissance, discovery, and exploitation to identify network vulnerabilities. We simulate attacker methodologies to test perimeter defenses, internal segmentation, and persistence mechanisms. Comprehensive reporting includes risk prioritization based on exploit likelihood and business impact, with remediation strategies that maintain operational continuity.
Virtual CISO Services
We provide experienced security leadership to develop tailored security programs aligned with business goals. Our VCISO service includes strategic planning, audit management, compliance guidance, and employee training programs. This scalable solution offers access to executive-level expertise without full-time executive costs, adapting to organizational growth and regulatory requirements.
IoT Security Assessment
Our team evaluates IoT and smart device security across multiple protocols including Zigbee, Bluetooth, and Wi-Fi. We test technical controls for access management, secure communications, and firmware vulnerabilities. Compliance assessments cover NIST IR 8425 and ETSI EN 303 645 standards, with remediation support for secure product development lifecycles.
People
Frank Heidt
Chief Executive Officer
Frank leads Leviathan's strategic direction with extensive cybersecurity leadership experience. He drives innovation in security solutions while maintaining the company's technical excellence and client-focused approach.
Kelly Gardner
Chief Operating Officer
Kelly oversees daily operations and service delivery excellence. With deep industry knowledge, she ensures efficient execution of security programs while maintaining organizational scalability.
Brian Campbell
Chief Technology Officer
Brian directs technical innovation and methodology development. His expertise in advanced security testing shapes Leviathan's approach to emerging threats and complex system vulnerabilities.
Questions
What differentiates Leviathan's penetration testing from automated scans?
Our manual testing combines artisanal attack techniques with industry standards, focusing on business-impact prioritization rather than generic findings.
How does the Virtual CISO service adapt to company growth?
Our VCISO service scales with your organization, providing increased support or specialized expertise as your security needs evolve.
What IoT protocols do you test?
We test Zigbee, Z-Wave, Matter, Bluetooth/BLE, Wi-Fi, Wiegand, RFID, NFC, and other common IoT communication protocols.
How do you handle sensitive test data?
We follow strict data classification and disposal protocols, ensuring test data is securely handled and promptly deleted after use.
What compliance standards do you support?
Our services align with OWASP Top 10, NIST IR 8425, ETSI EN 303 645, and other industry-specific regulatory requirements.
