I’m Dr. Connor Martin, founder of Coldwire Labs, an independent research and security consulting practice in central Pennsylvania.

I build and lead security programs, and I break things to understand them. Over the last decade-plus I’ve taken organizations through SOC 2, ISO 27001, TISAX, and NIST CSF, led penetration testing, architected cloud and industrial defenses, and handled the hands-on engineering too, from Terraforming a WAF in AWS to incident response when something goes wrong. The through-line is that I work at the seam between IT and the systems that run the physical world, where the interesting failures happen and where most defenses quietly break.

I came up through offensive security, and it still shapes how I defend. To protect a system, I first learn exactly how it breaks. That instinct runs from governance and risk all the way down to the research I do on exotic software, malware, and industrial control systems, the novel and poorly understood problems that land on the bench next.

I hold a PhD in Homeland Security, operate a CVE Numbering Authority program publishing vulnerabilities in coordination with MITRE and the CVE Program, and my doctoral research on cybersecurity risk assessment for critical infrastructure has been cited in the academic literature.

If you have a problem that’s unusual, high-stakes, or the kind other firms would rather not touch, that’s the work I’m built for. Let’s talk.