Information security / cloud security consulting
We assess risk, design practical controls, and securely set up the cloud and AI systems your organisation depends on. Our work includes information security, cloud security, and AI agent security.
Practical consulting for the whole system: people, process, identity, data, cloud infrastructure, applications, and AI agents.
Focused advice that turns business risk, technical constraints, and compliance expectations into an actionable security plan.
Secure architecture, configuration, and operating foundations for new or existing AWS, Azure, and GCP environments.
Threat modelling and controls for AI agents that combine models, data, memory, tools, identities, and autonomous action.
Representative consulting and engineering engagements. Client identities remain private, while the sectors, challenges, and scope remain concrete.
Energy sector
Architecture for securely training, fine-tuning, and serving open-source LLMs, with identity controls across model APIs, data stores, and compute. Security telemetry feeds an AI-assisted threat-detection system.
Azure · Entra ID · Sentinel · Defender XDR · MLOps
IP management
Target architecture for central log ingestion and threat detection, including custom rules, parsing, response playbooks, triage workflows, and onboarding runbooks for new sources.
Google SecOps · Entra ID · Defender · Meraki · MongoDB Atlas
Energy sector
Security frameworks for endpoints and digital identities, core SIEM infrastructure, Azure Active Directory assessments, and policies for interconnected cloud platforms.
AWS · Azure · IAM · SIEM · Endpoint security
Each engagement moves from the outcome you need to controls your team can operate, observe, and improve.
Clarify the business goal, material risks, technical context, and decisions the engagement needs to support.
scope.define()Trace trust boundaries, data flows, identities, access, operators, and the assumptions between them.
surface.map()Design and implement proportionate controls across identity, policy, isolation, approvals, logging, and recovery.
controls.apply()Test important failure modes, document decisions, and leave your team with clear priorities and an operable security baseline.
outcome.verify()newman.ai brings 16 years of hands-on experience across software engineering, platform reliability, cloud architecture, and security operations.
Company foundation
Our perspective is deliberately end-to-end: how software is built, how cloud platforms are operated, and how defenders see and contain failure. That same engineering depth shapes every consulting engagement, including work on AI agents.
Microservices, web platforms, and technical team leadership.
Container infrastructure, CI/CD, staging, and runtime architecture.
AWS, Azure, and GCP platforms, networking, automation, and governance.
SOC, SIEM, identity, endpoints, governance, and security at scale.
Secure LLM platforms, AI-assisted detection, SecOps, and AI governance.
Start a conversation
Tell us what you are building, reviewing, or securing. A useful first note includes the current context, the risk that matters, and what a successful engagement would change.