Sikkerhedsekspertise I kan regne med

Leads PB Security's technical security work: offensive testing, hardening and cloud security. Everything he does is grounded in how attackers actually operate, so findings turn into defences that hold.

Allan has more than twenty years in IT, IT outsourcing, advisory work and information security. He has held leading and advisory roles as head of information security, head of service delivery, and partner responsible for IT security and audit. Throughout, his work has been built on recognised standards, among them ISO/IEC 27001, ISO/IEC 27002, NIST and ITIL.

He has led larger projects and advised on the purchase, delivery and management of IT and security services, and he has been a keynote speaker on information security.

As a senior adviser and strategist, Allan helps organisations set direction, draw up plans and carry out transformations. He specialises in turning IT regulation such as GDPR, NIS2 and DORA into practical solutions, and he advises clients on implementing concrete security measures.

He has helped several public organisations implement an ISO/IEC 27001 ISMS and develop frameworks for assessing and handling IT risk. The work covers design of the management system, the policies and guidelines themselves, and building competence among the client's own staff.

Simon is a Senior Security Advisor specialising in cloud security, on-premises environments, and web application security. His expertise spans both offensive and defensive security, including penetration testing, vulnerability assessments, security hardening, threat detection, and incident response. With a hands-on approach and deep technical knowledge, Simon helps organisations identify weaknesses, strengthen their security posture, and protect critical systems against evolving cyber threats.

An all-rounder across PB Security's technical work, moving between assessment, testing and hardening wherever a project needs the hands.

Jonathan started with pentesting and ethical hacking at around ten, taught by curiosity and by whatever he could take apart himself. He came into the field through computer engineering and software development, and has worked in security professionally for four years. He is completing the OSEP certification.

Roughly half of that has been hands-on testing. The other half has been scoping, documentation, reporting and quality assurance, which is what decides whether a test is worth reading. Writing scripts and automating anything that should not be done twice has been part of how he works for as long as he can remember.

For the past three years he has worked with AI from an engineering perspective, across workflow automation, agent harnesses, fine tuning, model behaviour and inference, and the security topics in the OWASP GenAI Top 10. It has taken him into client engagements testing prompt injection, sensitive information disclosure, model poisoning and system prompt leakage in live LLM applications.

He is particularly at home with Linux, web applications, bug hunting, source code and AI systems.