Viacursor / security tooling and advisory

Viacursor

Network security tooling that ships, and the advisory work to put it to use.

We build KEVLAR for vulnerability posture and reconfigd for configuration posture — and we work directly with security teams to design the programs that surround them. Engineer-built, framework-grounded, no slide-deck deliverables.

see what we build → work with us →
01 / what we build

Two products, one design system, two audiences.

Each Viacursor product covers a distinct axis of network security posture. They share infrastructure, design language, and operational principles — but speak to different people in different rooms with different jobs to do.

KEVLAR
in production
vulnerability posture · executive-readable

Ingests asset inventory from CrowdStrike, Entra, LogicMonitor, and Meraki, enriches it against the CISA Known Exploited Vulnerabilities catalog, and surfaces what an executive actually needs to see — without the noise of every CVE in existence.

  • CISA KEV detection across managed assets
  • Trend data and resolution tracking over time
  • Connector ecosystem: CrowdStrike, Entra, LogicMonitor, Meraki, and growing
  • Built for the boardroom, not the SOC
learn more →
reconfigd
pre-release
configuration posture · engineer-readable

A daemon that ingests network device configurations, audits them against security frameworks (NIST, CIS, STIG), and ships ready-to-paste remediations with the context engineers actually need to apply them.

  • Multi-vendor: Cisco, Palo Alto, Fortinet, Juniper, Meraki
  • Cut-and-paste remediations with inline explanations
  • Framework citations on every finding (no "best practice" hand-waving)
  • Built for the engineer, not the auditor
visit reconfigd.com →
02 / what we do

Advisory work, with running software at the end of it.

Most security consulting ends in a 60-page PDF and a status meeting. Viacursor advisory engagements end with something running in your environment — a hardened config, an integrated tool, a working playbook. We bring our products where they fit, and write what doesn't exist yet where they don't.

/ 01
Network configuration audits

Posture review of your network device configurations against a chosen framework (CIS, NIST 800-53, STIG, or your own internal standard). Findings come with explanations and ready-to-apply remediations — not just a list of violations.

cisco palo-alto fortinet juniper meraki
/ 02
Posture program design

Helping security teams design how they'll measure, track, and report on vulnerability and configuration posture across the organization. Includes data flow architecture, framework selection, and dashboard design — not just a methodology document.

vulnerability-mgmt config-mgmt reporting
/ 03
Custom security tooling

Internal tools, integrations, and automations for security operations work that doesn't fit a vendor product. We design, build, and deploy — and document it well enough that your team can maintain it after we leave.

internal-tools integrations automation
/ 04
AI-assisted security workflows

Practical guidance for integrating LLM-assisted development into security engineering work — without the failure modes (confident model errors, context drift, lost architectural ownership). Drawn from building Viacursor's products this way.

ai-engineering claude copilot verification
03 / how we work

The principles that govern everything we ship.

These apply equally to product design, advisory engagements, and the way we write a single line of remediation. When a decision feels uncertain, we return here.

/ 01
Engineer-first

We build for the people who'll use it, not those who'll buy it. The procurement process is not the product.

/ 02
Tools as the deliverable

Consulting that ends with running software, not slide decks. If you can't deploy it after we leave, we didn't finish the job.

/ 03
Outcome-oriented

Our products are named after what they make true. KEVLAR for protection. reconfigd for configurations brought into compliance.

/ 04
Framework-grounded

Every recommendation cites a specific control. NIST 800-53. CIS. STIG. No "industry best practice" hand-waving.

/ 05
Quietly confident

Confidence comes from specificity, not enthusiasm. We name the exact control, the exact remediation, the exact blast radius.

04 / get in touch

Have a network you'd like protected or configured-correctly?

We take on a small number of advisory engagements at a time, and we'd rather have a real conversation than fill out an intake form. Send a note describing what you're working on, and we'll reply within a couple of business days.

hello@viacursor.com → visit reconfigd.com →