Kevin Tackett

Founder & CEO

About Kevin

Kevin Tackett (fka Kevin Johnson) is our CEO. He has over 30 years of experience, since getting his start in systems administration and app development and later transitioning into cybersecurity. He is a former OWASP Global Board member and current faculty member with IANS, and has developed three SANS Institute classes: SEC542: Web Application Penetration Testing and Ethical Hacking, SEC642: Advanced Web Application Penetration Testing, and SEC571: Mobile Device Security.

He has contributed to several open-source projects, including OWASP SamuraiWTF, Laudanum, and Yokoso, as well as founding and leading the Snort BASE project. He has been invited as a keynote speaker at cybersecurity events like ISSA, GrrCon, and ShowMeCon, and has spoken at multiple industry conferences, including RSA, DEF CON, OWASP, DerbyCon, ShmooCon, and BlackHat. Kevin has also served as an expert witness in court cases involving cybersecurity.

When not immersed in consulting, testing, or educating, Kevin loves spending time with his daughters and exploring woodworking and costuming with the 501st Legion.

Upcoming Conferences

MAY
17

OzCon

Overland Park, KS

Slides and Materials

Back to the Future-Proof
Preparing Now for Quantum Decryption Threats

It’s a Dangerous Business
A Fellowship Approach to Cybersecurity

Ship of Theseus as a Service
Security Testing When Nothing Is Truly Yours

Raiders of the Lost Architecture
Security Testing in Modern Applications

Garbage In, Garbage Owned
Offensive Testing Strategies for AI Systems

Posts by Kevin

"It's a Dangerous Business, Going Out Your Door" Why the Cybersecurity Community Needs a Fellowship

“It’s a Dangerous Business, Going Out Your Door” – Why the Cybersecurity Community Needs a Fellowship

Explore how a fellowship model can transform the cybersecurity community, fostering mentorship and inclusivity for newcomers and veterans alike....
Quantum Leaping Through Data: Preparing for the Quantum Encryption Transition

Quantum Leaping Through Data: Preparing for the Quantum Encryption Transition

Quantum computers will break current encryption within 10 years, but adversaries are harvesting your data today. Your migration window is narrower than you think....
houston

Houston, We Have a Problem

Discover how comprehensive satellite penetration testing addresses vulnerabilities across spacecrafts, ground systems, and communication links to ensure end-to-end cybersecurity in space operations....
How to Get the Most Out of Your Penetration Test: A Guide to Preparation and Success

How to Get the Most Out of Your Penetration Test: A Guide to Preparation and Success

Learn how proper preparation ensures a successful penetration test. Discover key steps like access management for a thorough security assessment....
The Fellowship of the Phish: PayPal's Perilous Request Feature

The Fellowship of the Phish: PayPal’s Perilous Request Feature

Discover how attackers exploit legitimate features in PayPal's system to execute sophisticated phishing scams and what we can learn from creative misuse....
What is a Threat Led Penetration Test?

What is a Threat-Led Penetration Test?

Explore Secure Ideas' expert approach to Threat-Led Pen Testing (TLPT) and proactive cybersecurity strategies....

Message Kevin

Have a question about an engagement, a conference talk, or just want to say hello?
This goes directly to Kevin, not a general inbox.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.