CST-360 — Protecting what matters

Cyber security & AI risk consulting

Leverage your business with Cyber Security

Implementing security that enables business services and products — not security that blocks them.

Assurance coverage10 frameworks
CMMC 2.0
NIST SP 800-171
NIST AI RMF
ISO/IEC 42001
ISO 27001
OWASP LLM Top 10
EU AI Act
DFARS 7012
SOC 2
PCI DSS

Trusted by

CyberArkCyberArk JFrogJFrog FireblocksFireblocks Elbit SystemsElbit Systems Bank of IsraelBank of Israel BrightSource EnergyBrightSource OTORIO NeemaNeema IML SLUIML SLU IDF C4IIDF C4I

More capabilities

The wider picture

Work rarely arrives in isolation. Whatever sits next to it is covered by the same team, under the same accountability — so you are not managing three vendors to close one gap.

See all services

Who we are

Trusted advisors, not report factories

We combine hands-on technical depth with a working understanding of business objectives and processes. That lets you focus on growth while we unlock the most from your technology stack — protecting your data and securing your business.

More about CST-360
25+Years of practice
5Sectors served
8Frameworks assessed against
IDFCyber-defense doctrine background

Team

The people you actually get

No pyramid staffing. Six practitioners across methodology, architecture and security engineering — whoever scopes your work is who does it.

Oren Hadar

Oren Hadar

Founder & CEO

Cyber security methodology expert and cyber risk policy maker. 25+ years, including senior membership of IDF cyber-defense doctrine development teams.

Shlomi Halif

Shlomi Halif

CTO & Tech Lead

Cyber security architect and cloud solution expert, 10+ years across IT, networking and cyber security. Leads our technology services team.

Meet the whole team — 7 people

Newsletter

Signal, not noise

One email when something genuinely changes in cyber and AI risk — a new regulation, a framework update, a failure worth learning from. Roughly monthly. Unsubscribe in one click.

Let's talk

Plan your security

Pick the conversation that fits. We will spend the time on your actual exposure, not on a slide deck.

Security incident? Mark it urgent when you book.