Cybersecurity experience you can trust.
Since 1996, we've helped organizations secure their systems, prepare for audits, investigate incidents, and adopt AI safely, with practical advice that fits the business.
What we do
-
Cybersecurity consulting
We provide a full range of security consulting services, including risk assessments, security architecture, vulnerability management, and virtual CISOs.
-
Artificial intelligence
We help organizations use AI securely across the enterprise. We build AI solutions and train people to use existing tools safely, from everyday staff to developers writing more secure code with AI.
-
Investigation services
Technology-related investigations and digital forensics require specialized skills and equipment. Tenebris Inc. is a licenced investigation agency in the Province of Ontario.
-
Litigation support
We support lawyers in technology-related matters, from preserving and analyzing digital evidence to independent expert reports and testimony. Expert engagements are accepted only through legal counsel.
-
SOC 2 and ISO 27001 readiness
We have deep experience with SOC 2 and ISO 27001 control frameworks and in preparing organizations for audit, from readiness assessments to working with your auditor.*
-
Audits and assessments
Our Certified Information Systems Auditor (CISA) performs a range of other audits and assessments, including internal audits for ISO 27001 programs.
-
Software development
Cybersecurity threats and vulnerabilities are constantly evolving. We develop, integrate, and apply cutting-edge technology to assist with cost-effective risk mitigation.
-
Training
Theory is important, but nothing beats experience. Learn from security professionals with decades of real-world experience.
Practical security that works
Smaller organizations face the same threats as enterprises, but with different resources. We deliver right-sized solutions that make sense for your business.
Comprehensive security support
We offer fractional CISO services to provide executive-level security leadership without the full-time cost. Our expertise includes policy and control framework development, digital forensics, security training, and building resilience through Business Continuity, Disaster Recovery, and Incident Response planning and exercises.
Investigation and digital forensics
When security incidents occur or disputes arise, you need answers. Tenebris provides technology-related investigation services and digital forensics to uncover what happened, how it happened, and who was involved. We preserve critical evidence, analyze digital artifacts, and deliver clear, concise, and accurate reports. Whether you're dealing with a data breach, insider threat, intellectual property theft, or have been wrongly accused, we'll help you understand the full picture and take appropriate action. Our Principal Consultant has provided expert evidence in both civil and criminal proceedings before Ontario courts.
Streamlined compliance
We simplify SOC compliance for our clients. We can take on whatever is needed: policy and control framework development, readiness assessments, evidence collection, remediation planning, and direct collaboration with your auditor. While we are not a CPA firm and therefore cannot perform SOC audits, we have a Certified Information Systems Auditor (CISA) on staff who can support other audit and attestation requirements, including internal audits to meet ISO 27001 standards.
Software development
Our preference is always to identify cost-effective, off-the-shelf solutions that meet your needs. However, when custom development is the right path, we're ready to roll up our sleeves and work with you to build exactly what's required. We also design and develop our own tools, including advanced software that leverages large language models (LLMs) and related technologies such as Model Context Protocol (MCP) servers.
Artificial intelligence
We help organizations use AI securely across the enterprise, with practical guidance on the risks and the controls that address them. We design and develop AI-powered software, including applications built on large language models (LLMs) and Model Context Protocol (MCP) servers that connect AI to your systems and data. We also train people to use existing AI tools well; for example, we teach developers how to use AI to build more secure applications.
Training
Theory is important, but nothing beats experience. Our training draws on decades of real-world work in consulting, investigations, and incident response, and is tailored to the people and systems you actually have.
A partner who understands your reality
We know that small businesses can't afford security theatre. You need real protection that doesn't break the bank or slow you down. Whether you're establishing your first formal security program or enhancing existing controls to meet client requirements, we provide practical guidance that fits your business reality.
Talk to an expert
Tell us what you're dealing with and we'll tell you plainly whether, and how, we can help.
Email usOttawa, ON K1H 8K3
Canada
By appointment only
info@tenebris.com