About
A named human, not a ticket queue.
Best Cyber Solutions is a small, deliberately focused security firm. When you work with us, you work with me: Lonnie Best.
The company
The companies that most need a person watching are the ones nobody sells that to.
Best Cyber Solutions provides Managed Detection and Response for Mac- and Linux-first companies of one machine to about 50 people: The founder with a MacBook, the design studio, the seed-stage startup, the small research lab. They're usually told the same thing by every vendor: Come back when you have fifty seats.
Those companies aren't safe because they're small, and they aren't safe because they run Macs. macOS infostealers, malicious installers and poisoned developer packages don't care about headcount. They just need someone competent looking, a response that doesn't wait until morning, and a straight answer about what they're paying for.
That's what we do. The service runs on our own software, built for Mac and Linux, which is how it can be priced for a team of ten rather than a team of ten thousand. Automated containment covers the hours when nobody is awake, and a named analyst covers the judgment. We're veteran-founded and based in Maine.
The founder
Lonnie Best
I've spent more than a decade in detection and response: Triaging alerts across millions of endpoints, leading hunts for ransomware crews and nation-state actors, and building and running the teams that do that work around the clock.
Most recently I was Director of Managed Detection & Response at one of the largest pure-play cyber insurance companies in the world, responsible for the strategy, growth and 24/7 operations of its MDR and managed email security services. Before that I spent nearly eight years at Rapid7, from analyst to senior manager, including building a global team of threat hunters, cloud detection and response analysts and malware reverse engineers.
I started out at an IT managed service provider, protecting the same kind of small and mid-sized companies Best Cyber Solutions serves today, and served more than ten years in the National Guard in information operations, systems security and command. Since then I've mostly protected organizations large enough to have a security team. I started this company for the ones that aren't.
I've spoken at AWS re:Invent, the Rapid7 Take Command Summit, the DoD IT/New Mexico Labs Innov8 Forum, BSides Augusta, Delaware and Greenville, and the (ISC)² Maine Chapter, on nation-state intrusions, compromises in AWS environments, ICS/OT security and other stories from the trenches of the SOC.
- CISSP
- GIAC GCFA
- GIAC GICSP
- CompTIA CASP+
Talk to the person who'll be doing the work.
No sales team, no hand-off. The first call is with me.