LeeWay Skill House — Cyber Defense

Mission

Prevent, detect, contain, recover from and learn from security failures across LeeWay systems using current standards, least privilege, evidence and explicit authorization.

Defensive boundary

This House is for authorized defensive engineering. Security testing is scoped to owned/authorized systems. Detection/containment automation must respect action governance, blast radius, rollback and human approval for consequential actions.

Core divisions

CRYPTOGRAPHY/PQC; EDGE/NETWORK DEFENSE; SOC/DETECTION/IR; APPSEC/ZERO TRUST; IAM/PAM; CLOUD/CONTAINER; SUPPLY CHAIN; VULNERABILITY/EXPOSURE; DATA/SECRETS; RESILIENCE/RECOVERY; GOVERNANCE/VALIDATION.

Security law

No aggregate score can prove absolute security. UNKNOWN evidence, compromised trust anchors, identity bypass, key compromise, uncontained incident or failed recovery can independently block a green aggregate state.