Build Secure. Ship Fast.
CyberDunc designs and builds AI systems, applications and automations with security engineered in from day one, not bolted on after. CISSP-led, fixed-price, and yours to own.
Who we build for
Small & mid-size businesses
You need working software and AI you can trust with your data, from someone who will not sell you a stack you cannot run.
Teams adopting AI
You want AI working on your own documents and data without creating exposure, with the guardrails decided before launch.
Secure systems, built and handed over.
Every system ships with security built in and documentation you own. Open any line to see exactly what you get.
01 AI systems you can defendAssistants, document pipelines and automations that save real hours — with the data questions answered before launch.
What you get
- Use-case triage: where AI genuinely earns its keep for you, and where it quietly creates exposure
- Working systems built on your own data, with retention, access and vendor terms documented
- An AI acceptable-use policy your staff will actually follow, plus a review path for new tools
- Guardrails and human review at the steps where being wrong would cost you
- Threat-modeled and tested before launch: prompt injection, data leakage and access control, with a written handover
02 Secure application developmentThe internal tool, portal or integration you keep putting off — built by the person who also had to threat-model it.
What you get
- Discovery that starts with the workflow and the data, not the tech stack
- Authentication, authorization, logging and secrets handled properly on day one instead of retrofitted after an assessment
- Code you own outright, documented well enough that your team or another firm can take it over
- A written handover: architecture, dependencies, and the specific things to watch
03 Websites and digital presenceA site that loads fast, reads well, and does not become somebody else’s foothold six months later.
What you get
- Design and build on hosting you control — your domain, your accounts, your analytics
- Hardened from the start: HTTPS, security headers, patched dependencies, real backups
- Content structured so you can edit it yourself without breaking the layout
- Optional care plan: monitoring, updates, and a person to call
04 Security and compliance advisorySecurity leadership for what you build and run: the risk decisions made, written down, and defensible when someone asks.
What you get
- A plain-language risk register naming what could actually hurt the business — ranked, with an owner and a date on every line
- Policies and procedures written to fit how you really work, mapped to whatever you are held to (NIST CSF, SOC 2, HIPAA, ISO 27001)
- Gap assessment and a phased roadmap: what to fix this month, this quarter, and what can wait without pretending it is fine
- Audit and security-questionnaire support — evidence assembled and reviewers answered directly, so your team stays on their day jobs
- A quarterly leadership briefing your board or your biggest client can read in ten minutes
You always know what happens next.
The scoping call
Thirty minutes. You describe what you want built and what data it will touch; I listen for the risks that should shape the design. If you need something I do not do, I say so and point you somewhere better.
A written scope
One page: what I will build, what I will not, the fixed price, the dates, and what access I need. Nothing starts until you approve it.
Built in the open
Short updates and working demos as I go — not a black box that produces a system in six weeks. Anything urgent reaches you the hour I find it, by phone.
Security review and launch
A threat model, testing and a written handover before go-live: architecture, dependencies, and what to watch. Written for your team, not for an auditor’s shelf.
A check back
Ninety days after launch I review how the system is running, at no charge. Closing the loop is part of the job, not the next invoice.
Larry Duncan
Founder & Lead Builder · CISSP, CCSK
Never Let Go of Your Dream
It started with a gift. When I was just a kid, my mom and dad bought me a word processor. They had no idea they were lighting a flame that would burn for a lifetime.
Years later, I was hauling a server home from a garage, heart pounding, hungry to learn. I stayed up late installing Linux, databases, web services, and virtual machines, building, breaking, and starting over because I refused to quit. When I knew IT was where I belonged, I went back to school and earned my Master’s in Information Systems Management. Then came the CISSP and CCSK, hard-won proof that persistence pays off.
Today, I’m building AI solutions with Claude and studying TOGAF, all in pursuit of the dream that started at a kitchen table: creating tools that can change the world.
That dream is CyberDunc. And if my story tells you anything, let it be this: no matter how far away your dream feels, don’t you dare let go.
Your dream is worth it. Let’s build it together.
Credentials matter. Conduct matters more.
CISSP & CCSK held
Security and cloud security credentials that require real experience to earn and continuing education to keep.
Security engineered in
Every build is threat-modeled, tested and documented before launch. A mutual NDA and a written scope come first: the systems in play, the dates, the fixed price.
Your data stays yours
Project data is encrypted, shared only with the people you name, and destroyed on request when the engagement closes.
No lock-in, no kickbacks
Month to month, cancel any time, no reseller commissions. Everything we build is documented so anyone can pick it up.
Start with a free scoping call.
Tell me roughly what you want built. You will hear back within one business day with times and, if it is useful, what to have handy for the call. No obligation, no pitch deck.
Phone
678-968-2474