About Cyber Wasp
Cyber Wasp is an independent security advisory practice based in New York City. We help organizations establish an accurate view of their exposure, design controls that withstand production conditions, and mature security programs to meet the demands of the environments they protect. Our work spans financial services, technology, global retail, and public safety, across enterprises operating at significant scale as well as organizations establishing a security function for the first time.
Practitioners First
Our advisory is grounded in twenty-six years of practice across the operational, engineering, and architectural disciplines of security, built from the ground up beginning in frontline information technology and telecom roles. That practice spans identity and access management, network and infrastructure security, security operations and incident response, threat intelligence, offensive security and purple teaming, enterprise risk assessment, merger and acquisition security, program delivery, and enterprise architecture, typically carried concurrently rather than in sequence. We have held responsibility at every layer of a security organization, from network and identity through data protection and application access, up to the governance and executive layers that set risk posture. That accumulated perspective is the basis of our judgment about which controls hold under real conditions and which merely satisfy documentation.
How We Engage
We work across the full arc of a security engagement, from the initial risk assessment through the architecture and into the governance that sustains it. That continuity matters. Recommendations are shaped by what it takes to actually implement them, and the architecture reflects an understanding of where controls tend to fail once they are live.
Where We Work
The core of our work spans enterprise and cloud security: cloud architecture and control design, identity and privileged access programs, security operations and incident response, third-party risk, and regulatory readiness across NIST CSF, ISO 27001, PCI DSS, SOC 2, and NYDFS Part 500. Threat intelligence runs through much of it. We have represented an institution at FS-ISAC and built predictive monitoring capability that correlated open-source signal with emerging risk to position resources ahead of it rather than after. Adjacent to this sits deep work in crisis and emergency response, trust and safety, and privacy by design, developed through direct responsibility for live operations under adversarial conditions.
That foundation now extends into emerging technology, where the same architectural and risk disciplines apply to systems the industry is still learning to control. We advise on organizational AI governance under the NIST AI RMF and adjacent frameworks, covering acceptable use, model and vendor evaluation, shadow AI controls, data leakage prevention, and the monitoring structures that govern AI adoption at enterprise scale.
Agentic AI security is our newest and fastest developing specialty. Autonomous agents now hold credentials, access enterprise data, and execute actions with limited human intervention, and the control models for that behavior are still being written across the industry. We have invested substantially here, including original research into agent containment failures, applied work deploying agentic workflows in live operational settings, and analysis against emerging standards such as the OWASP Top 10 for Agentic Applications. We treat it as a field we are actively helping to define, and we are direct with clients about where the discipline is mature and where it is not.
Who You Work With
Cyber Wasp was founded by Peter Kerre, CISSP, whose career spans security architecture and operations at J.P. Morgan Chase, MUFG Union Bank, Best Buy, and Wells Fargo, including security work across several of the largest bank integrations in United States history. He is also the founder and CISO of Safe Walks NYC, a public safety organization he built from inception to a citywide operation of more than 200 trained members, drawing national and international media coverage and inquiries from municipal governments abroad.
Engagements are led by the principal. Clients work directly with the practitioner performing the analysis, which is how findings stay accurate and decisions stay fast.