About

Who we are, and why we're grumpy.

Two middle-aged men in navy shirts with arms crossed against a dark background, one bald with a grey beard and smiling, the other with glasses and a more serious expression

We're cybersecurity practitioners who have watched the same mistakes get made, the same snake oil get sold, and the same vendors oversell the same promises — for decades. We're past the point of being polite about it.

This blog is where we write about what's actually going on in the world of infosec: threat intelligence, tooling, architecture, policy, and the occasional rant about why people still click phishing links.

What to expect

Technical posts grounded in real-world experience. No paid placements, no sponsored content, no "thought leadership" fluff. Just opinions earned through years of incident response, architecture reviews, and getting paged at 3am.

Get in touch

You can reach us at hello@grumpyoldcyberguys.com. We read everything, reply to some things, and ignore the rest.