About Threat Tape

The Short Version

I'm Kevin Stallard—Uncle Grimmy to anyone who's followed Threat Tape. I've been doing information security since 1988, which means I've watched this industry make the same mistakes for four decades and I'm done pretending it's fine.

The Real Version

I spent 38 years in the trenches. Microsoft during the $69B Activision acquisition. CDC as a contractor during Ebola. Project work with agencies whose names you see in Tom Clancy novels. U.S. Bank, building threat hunting programs while executives asked why we needed them. Northrop Grumman, EarthLink back when spam was existential—I've seen every flavor of corporate security theater and organizational denial.

I've achieved the numbers that look great on a resume: 85% reduction in security incidents, 99.92% vulnerability decrease, millions saved in infrastructure costs. But here's what those numbers don't tell you: most of those wins came from convincing people to stop doing stupid things rather than implementing fancy technology.

Now I build what I wished existed when I was a CISO. EDDi replaces the compliance spreadsheet hell that wastes every security team's time. VoteSecured protects elections because democracy shouldn't run on systems built by the lowest bidder. I hold three patents and have thirteen pending—not because I wanted the wall decorations, but because some problems needed solving and nobody else was doing it.

I've advised Christie Golden on hacking for Assassin's Creed, ran video gaming for Dragon Con for almost 20 years, and I'm currently pestering Georgia legislators about Safe Harbor laws because CISOs who do the right thing shouldn't face personal liability for it.

Threat Tape exists because the cybersecurity industry has a bullshit problem. I'm not here to add to it.

Threat Tape delivers the battle-tested perspective of cybersecurity professionals who've spent decades watching companies make the same preventable mistakes. We provide the reality check your organization needs in a world of buzzword-laden vendor pitches.

We don't believe in snake oil solutions. We build real security—zero trust architectures, comprehensive code reviews, incident response, and compliance strategies that work in the real world. If it plugs in and can be compromised, we've probably defended against it.

We combine formal credentials and structured methodology with brutal honesty, practical wisdom, and well-earned insight about "revolutionary" security solutions that are often just old problems in new packaging.