About us
From the research lab to the field
A dual legitimacy, academic and operational, put to work for the security of SMBs and public institutions.
A rare academic foundation, tested in the real world
Advanced training, extended by active research work, before being put to the test daily against the concrete needs of the organizations we support.
PhD in Computer Science — Dr. Martin Guillaume Tchio Tchinda
Founder and CEO of CYBERISK LLC. PhD in Computer Science focused on hybrid classical / post-quantum cryptographic systems applied to IaaS cloud environments — the foundation of a rigorous and methodical approach to risk analysis.
Two complementary Master's degrees
Master of Science, Cybersecurity Management (Lindenwood University) and Master's in Networks & Telecommunications (HETEC, Mali) — dual training at the intersection of information systems and applied security.
Published research in post-quantum cryptography (PQC)
Peer-reviewed publication on hybrid cryptographic systems (Utilitas Mathematica, 2025); earlier work cited in the proceedings of the IEEE ETFA 2020 conference.
From the lab to the field
Security analysis, penetration testing, identity and access management (IAM), and AWS cloud security, with hands-on practice covering pfSense, XDR, VPN, IPS/IDS, Active Directory, and enterprise network architecture.
Formalized internal procedures, not improvisation
Every type of engagement follows a written, referenced procedure, reviewed before each intervention.
LAN network penetration testing
CYBERISK-PROC-LAN-001
Web application penetration testing
CYBERISK-PROC-WEBAPP-001
Wi-Fi penetration testing
CYBERISK-PROC-WIFI-001A qualification profile aligned with institutional requirements
Illinois-based, with a capability statement filed for State of Illinois government contracts, covering NAICS and NIGP codes across the full scope of our practice areas.
Sectors served
Federal government
State & local government
Healthcare
Financial services
Education
SMBs
Critical infrastructure
Technology
Headquarters: Carol Stream, Illinois. SAM.gov, IL BidBuy, and Illinois
Procurement Gateway (IPG) registration in progress.
NAICS Codes
541511 Custom software development
541512 Computer systems design
541513 IT infrastructure management
541519 Other computer-related services
518210 Data hosting & processing
611420 IT training
NIGP Codes (Illinois BidBuy)
918-93 Security consulting
920-05 Cloud computing
920-48 Software development
920-86 IT consulting
920-87 IT security services
920-93 Network security
920-94 Vulnerability assessment
920-95 Penetration testing
920-96 Incident response
CYBERISK WAF Console
A complete Web Application Firewall (WAF), designed and deployed to protect the infrastructure of SMBs and public institutions in real time. From traffic analysis to incident response, the console centralizes 9 operational modules built for rigorous administration and full visibility over the security of the application perimeter.
- MaxMind GeoLite2
- 2FA TOTP
- Real-Time Anti-Surge
- Admin / Viewer RBAC
Dashboard
An overview of filtered traffic over the last hour, automatically refreshed every 10 seconds: four key counters (allowed requests, blocked requests, quarantined machines, unacknowledged alerts), the top 10 most active source IPs, and a preview of recent alerts.
- Allowed requests
- 12,480
- Blocked requests
- 963
- Quarantined machines
- 7
- Unacknowledged alerts
- 3
Advanced IP Rules
Filtering by single IP address or CIDR range (e.g. 203.0.113.0/24).
Each rule is set to Allow (ALLOW) or Block (DENY),
with an optional note to document the reason — an active ALLOW rule always takes
priority over a DENY rule that would otherwise cover it.
Geographic Filtering (GeoIP)
Allows or blocks traffic based on the IP's country of origin, resolved through the MaxMind GeoLite2 database. Two modes: blacklist (countries listed as DENY are blocked, all others pass) or whitelist (only countries listed as ALLOW pass). Filtering disabled = fail-open mode, no rule applied.
DNS Domain Control
Filters based on the requested domain name, using the Host header and/or reverse DNS (PTR) resolution of the source IP. Supports suffix matching (domain and subdomains) and an Allow or Block mode per domain.
Quarantine System
Two mechanisms: a surge detection system (anti-surge) that automatically blocks (code 429) and alerts when an IP exceeds a request threshold over a configurable sliding window, with optional automatic quarantine; and manual isolation by IP, with an optional name/label and reason.
Traffic Log
A complete, filterable history (by source IP and by decision: allowed, blocked, or all) of every request evaluated by the firewall, with date, IP, country, requested host, HTTP method, path, and reason.
Alert Center
A list of significant security events detected (traffic spikes, quarantines, etc.), with date, type, source IP, message, severity, and status (acknowledged or not).
Strong Security (2FA TOTP)
Two-factor authentication via TOTP (a one-time code generated by Google Authenticator or Authy) to secure the administrator account, which can be enabled or disabled directly from this page.
Users & Roles
Manages accounts with access to the console, with two roles: ADMIN (full access) and VIEWER (read-only — dashboard, rules, logs, and alerts, with no edit rights). Each account shows its status, 2FA state, and creation date; the admin account has anti-lockout protection that limits its own self-management.