Security consulting. Faster findings, fewer gaps.
Callum Reeve spent eight years inside a managed security operations centre in Okazaki, watching the same categories of vulnerability appear in client after client: default credentials on internal services, overly permissive Active Directory delegation, web applications that had never been tested past a checkbox scan. The reports that came back from third-party testers were often 80-page PDFs with CVSS scores and no remediation guidance. Developers would read the executive summary, file the rest, and nothing would change. That pattern was the reason Swift Vaultgate was incorporated in spring 2019.
The first year was deliberately small. Callum took on four clients, all referred by former colleagues, and spent the time building the report format that is still used today: short, specific, written for the person who has to fix the problem rather than the person who commissioned the test. The remediation call, which is now standard in every engagement, started as an experiment with a logistics company in Coventry whose IT team had no idea what a SQL injection actually meant in practice. After that call, they patched three critical findings in a week. Before it, those findings had sat in a report for two months.
Callum Reeve founded Swift Vaultgate in 2019 after eight years as a senior analyst at a managed SOC in Okazaki, where he led incident response for clients across financial services and healthcare. Before that, he spent three years as an in-house IT security engineer at a regional insurance broker, where he ran the company's first formal vulnerability management programme from scratch. He holds OSCP and CREST CRT certifications and is currently working toward CHECK Team Leader status. Outside the work, he coaches junior cricket on Saturday mornings and is methodical enough about it that his players find it slightly alarming.