Independent
No vendor commissions. Advice isn’t tied to products.

Cornhill Cyber gives growing businesses a complete cybersecurity leadership function without the cost of building one internally. One named senior owner, accountable end-to-end.
We spent that time working out how to break things. It turns out to be useful preparation for telling a board which of their risks are real.
Cornhill Cyber was founded by Matthew Carr, CISSP, after more than fifteen years working across cybersecurity, national security and highly regulated environments.
His background spans adversary simulation, security research, critical infrastructure and executive cyber risk. Before founding Cornhill, he led offensive security and research work for large global organisations and co-founded security technology company Atumcell.
That experience shapes how Cornhill works today: understand how the organisation can actually fail, identify the risks that matter, and give leadership a clear plan for dealing with them.
No vendor commissions. Advice isn’t tied to products.
Senior work stays senior. No junior team appears after the sale.
Risk becomes decisions, ownership and a roadmap — not another report.
BBC News · The Telegraph · The Register · Barron’s · Channel Futures
Matthew’s security research and commentary have been covered by international technology and business media.
DEF CON · GITEX · GISEC · CONFidence · SteelCon
Research, technical talks and executive briefings delivered internationally across four continents.
Matthew Carr is a Freeman of the Worshipful Company of Information Technologists, the City of London’s technology livery company.
A professional affiliation, not a technical certification or regulatory authorisation.
Cornhill runs east from the Bank junction, past the Royal Exchange. The practice took its name from the address rather than the other way round.

A first conversation takes about thirty minutes and costs nothing. If we are not the right answer to your problem, we will say so.