Lundbrook

Independent security engineering and practical automation.

Lundbrook helps organizations detect threats, run leaner security operations, and automate the repetitive work that slows small teams down.

See services Get in touch

Services

Hands-on engineering, scoped to a clear outcome. Two areas of work.

Security engineering

Building and improving the systems a security team relies on every day.

  • SOC engineering. Log pipelines, SIEM configuration, alert routing, and the operational plumbing that keeps a security operations center running.
  • Detection engineering. Writing, tuning, and testing detections against real log data, with documentation an analyst can act on.
  • AI-assisted security operations. Putting AI tools to work on triage, investigation support, and detection authoring, with a human engineer reviewing every result.
  • Vulnerability management. Scanning, prioritization, and remediation workflows that fit how your environment is actually built.
  • Cloud security. Reviewing and hardening cloud configurations, identity, and logging coverage.
  • Security automation. Scripts, integrations, and small internal tools that remove manual steps from security work, often built with Claude Code.

AI and operations automation for small and mid-size businesses

Practical automation for teams that have more repetitive work than people to do it.

  • Workflow automation. Taking a process that someone repeats every week and turning it into something that runs itself, with a clear place to check on it.
  • Internal tools. Small, purpose-built tools for intake, reporting, tracking, or handoffs between systems.
  • AI-assisted processes. Using language models for drafting, classifying, summarizing, and routing where it genuinely saves time, and leaving them out where it does not.
  • Plain-language documentation. Every automation ships with a write-up of what it does, how to run it, and how to turn it off.

How I work

Scoped engagements

Each engagement starts with a short written scope: what will be built or reviewed, what is out of bounds, and what done looks like. Fixed-scope projects and ongoing retainers are both fine.

Written deliverables

You get working code, configuration, and documentation that your team owns and can maintain without me. Findings and recommendations arrive in writing, not just in a call.

Human review of AI-assisted work

AI tools speed up a lot of engineering work. They also make confident mistakes. Anything produced with AI assistance is reviewed, tested, and signed off by me before it reaches you.

ClaudSecurity

ClaudSecurity is the name for the approach I use on security work: Claude Code handles the heavy lifting of detection authoring, investigation support, and automation, and a human engineer reviews, tests, and owns the result. The tooling drafts; the engineer decides. It is a way of working, not a product, and the details of how it is applied are tailored to each engagement.

Who it's for

Small and mid-size businesses

Organizations that need security engineering or automation done well, but do not have a full-time role for it. Work is sized to fit the team you have.

Managed security service providers

MSSPs that need extra engineering capacity for detection content, platform work, or automation projects, delivered to your standards and handed back to your team.

Government-scoped engineering

Open to clearly scoped engineering engagements with government organizations and their contractors, where the scope, deliverables, and handling requirements are defined up front.

Healthcare and HIPAA-regulated environments

Willing to sign Business Associate Agreements (BAAs) for work that touches protected health information, and to work within the handling requirements your organization sets.

About

Lundbrook is the independent practice of Micah Falde, a security engineer who works on detection, security operations, and automation. The business is one person, which means the engineer you talk to is the engineer who does the work.

I prefer plain explanations over jargon, written deliverables over slide decks, and tools that your team can keep running after I leave.

Contact

If you have a project in mind, the best first step is a short description of what you need and when you need it.

Contact email coming soon

lundbrook.com mail is being set up. A contact address will be posted here once it is live.