Honest, hands-on cybersecurity consulting for small businesses that can't afford to be breached. From vulnerability assessments to compliance — I have you covered.
Penetration testing, vulnerability assessments, compliance consulting, security awareness training, and website development — all delivered hands-on with security built in from day one.
Vulnerability assessments from $2,500. Full penetration tests from $8,500. Website development from $500. You'll always know exactly what you're paying for before I start.
I'm Isaac Pullig — a cybersecurity student at UCCS, IT professional, and national CyberPatriot competitor. I started Cacti Security to bring real, affordable security consulting to small businesses who deserve better than they can normally access.
Book a free 30-minute consultation or send a message. No commitment, no sales pitch — just an honest conversation about where your security stands and what it would take to improve it.
End-to-end protection for your digital infrastructure, from assessment to remediation.
I think like a real attacker. I find your vulnerabilities before the bad guys do — and give you a clear path to fix them.
Navigate complex compliance landscapes with clear guidance. I help you build security programs that satisfy regulators and actually protect your business.
Your employees are your first line of defense — or your biggest vulnerability. My tailored training programs turn your team into a human firewall.
Professional, fast websites built with security from day one — no vulnerable plugins, no bloated templates. Clean custom code that looks great and stays protected.
I started Cacti Security because small businesses deserve real security consulting — not overpriced retainers, not checkbox compliance, not a report that collects dust. I bring a hands-on, practical approach to every engagement.
I'm a cybersecurity student at UCCS with real-world experience in IT infrastructure, competitive security programs, and hands-on lab environments. Every project I take on makes me better — and makes you safer.
Real tools, real labs, real environments
I think like attackers to protect defenders
Plain-language findings with actionable fixes
No inflated invoices or enterprise markups
Unauthenticated access to full user database via unsanitized parameter.
TLSv1.0 enabled, susceptible to BEAST & POODLE attacks.
Multi-factor authentication successfully enforced across all admin accounts.
A clear, structured approach that delivers results every time.
I meet with your team to understand your environment, goals, and risk tolerance. Together we define a clear scope that balances thoroughness with your operational constraints.
I execute the engagement using industry-standard methodologies and tooling. I work carefully to avoid operational disruption while achieving maximum coverage.
Every finding is documented with a risk rating, reproduction steps, and a clear remediation recommendation. You get both an executive summary and a technical deep-dive.
I work alongside your team to prioritize and validate fixes. Every engagement includes a free re-test to confirm critical and high-severity findings are fully remediated.
Request a free initial consultation. I'll assess your current posture and identify your most critical risks — at no cost.