Veteran-owned · Atlanta, Georgia
An adversarial approach to security — we find what attackers would, before they do.
Book a 20-minute scoping callAI features ship faster than security reviews can keep up.
Stone-Knight tests LLM-powered applications, chatbots, and AI-generated codebases the way an attacker would.
You receive findings mapped to the OWASP Top 10 for LLM Applications, with clear remediation guidance your developers can act on.
At Stone-Knight Security, we take an adversarial approach to protecting your business. Stone-Knight combines manual tradecraft with industry-leading automated tools to identify exploitable vulnerabilities across your applications, networks, cloud environments, and AI systems — before an attacker does.
We assess your true security posture against real-world attack techniques, including privilege escalation, injection attacks, unauthorized access pathways, and sensitive data exposure. Every engagement is scoped to your environment and calibrated to the threats most relevant to your industry.
Our assessments are designed to meet recognized security standards, including PCI DSS penetration testing requirements, NIST frameworks, and sector-specific compliance mandates. Whether you need a point-in-time penetration test or an ongoing vulnerability management program, Stone-Knight delivers findings that are clear, actionable, and tied directly to business risk — not just a list of CVEs.
Offensive depth across the full attack surface — networks, applications, cloud, AI, and compliance.
We simulate the full attack chain — reconnaissance, exploitation, lateral movement, and exfiltration — across your networks, applications, and cloud environments. You get a clear picture of what a real adversary could do, and exactly what it takes to stop them.
Stone-Knight's DAST program goes beyond one-time scans. We run continuous dynamic testing against your live applications and pair the findings with direct access to the consultant who ran the test — so vulnerabilities get remediated, not just reported.
Our Static Application Security Testing (SAST) service analyzes your source code and binaries before deployment — identifying vulnerabilities at the root rather than in production. Whether you need a one-time assessment or help implementing a SAST program from the ground up, we build security into your development lifecycle from day one.
Compliance frameworks exist for a reason — but navigating them without the right expertise costs time, money, and sleep. Stone-Knight has worked across PCI DSS, HIPAA, CMMC, and FedRAMP environments and knows where organizations consistently fall short. We assess your current posture against the specific controls that apply to your business, deliver a clear remediation roadmap, and help you walk into your next audit prepared.
Cloud misconfigurations are among the most exploited attack vectors in modern breaches. Stone-Knight's cloud security assessments evaluate your AWS, Azure, or GCP environments against real-world attack techniques — identity and access controls, storage exposure, network segmentation, and workload security — delivering actionable findings before an attacker finds them first.
A vulnerability assessment gives you an accurate picture of your security posture at a given moment in time — but the threat landscape doesn't stand still. Stone-Knight structures VA engagements as part of a continuous risk management program, ensuring your organization isn't just secure today, but maintains that posture as your environment evolves. We deliver prioritized findings mapped to business impact, not just raw CVSS scores.
Every industry carries its own threat profile. We scope each engagement to the attacks that actually matter for your sector.
Point-of-sale systems, e-commerce platforms, and cardholder data make retail a constant target. We test against PCI DSS requirements and the payment-fraud techniques attackers use in the wild.
Financial institutions face well-funded, persistent adversaries. We assess transaction integrity, access controls, and regulatory exposure with the rigor that auditors and account holders both demand.
Protected health information is among the most valuable data on the black market. We evaluate your environment against HIPAA controls and the ransomware and access-abuse patterns hitting healthcare hardest.
SMBs are targeted precisely because attackers expect light defenses. We deliver enterprise-grade assessment scoped and priced for organizations that can't afford a dedicated security team — or a breach.
We built Stone-Knight the way we believe security should be practiced — with honesty, accountability, and a genuine partnership with every client we take on.
Stone-Knight Security was built on a simple premise: most organizations don't know what they don't know. Threat actors count on that gap. We close it.
Stone-Knight Security is a principal-led offensive security firm founded by Earl Knight, a U.S. Air Force veteran with more than twenty years in information security across VeriSign, KPMG, Fiserv, and federal and commercial environments. Earl holds a secret clearance and has tested systems for financial services, healthcare, legal, and aviation organizations.
When you engage Stone-Knight, the person who scopes your assessment is the person who performs it and writes your report. No hand-offs to junior staff, no findings lost in translation.
What sets us apart isn't just what we find — it's how we communicate it. We translate complex technical risk into business language that executives can act on and security teams can execute against. That commitment to clarity and follow-through is what keeps our clients coming back.
We tell you what we find, not what you want to hear.
We stay engaged beyond the report until risk is resolved.
Every finding is scoped, validated, and tied to real-world impact.
Notes from the field on vulnerabilities we consider worth your attention.
Cyber Muster is our daily threat brief, tracking actively exploited vulnerabilities and ransomware activity. Read today's brief
Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...
Continue ReadingMicrosoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
Continue ReadingCheck Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.
Continue ReadingWordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.
Continue ReadingFortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
Continue ReadingOracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.
Continue ReadingInternet-facing SSL VPN. If you run SMA1000, assume compromise predates your patch window and rotate credentials before you update.
Continue ReadingEPSS 99 percent. Mass scanning is already underway. ColdFusion should not be internet-facing at all.
Continue ReadingScope an engagement with a consultant who stays engaged beyond the report.
Book a 20-minute scoping callEngagements typically start at $8K. Call 202-503-5531 or email earl@stone-knight.com.
