Consulting from Shostack + Associates


Shostack + Associates is a specialized security consultancy, focused on meeting the unique needs of each client through a variety of services including threat modeling, security engineering and risk management.

Projects we've delivered have spanned from solving hard technical security problems through business strategy. Our experience includes both building and securing products, services and businesses. That gives us a unique perspective, focused on solving your problems in the most effective ways.

Threat modeling + Secure Development

Some are related to threat modeling: process design, training design, or even threat modeling for very important systems.

Expert Witness Services

Adam's expertise in security has served both small and large clients. Adam's depth in software security has been particularly useful to clients in large, complex multi-year cases with many plantiffs and defendants. He helped author amicus briefs for the Supreme Court in both Carpenter and van Buren.