Work

Client work should show what changed.

Blackpine publishes client work only when the organization has approved the attribution and the engagement can be described without exposing sensitive systems, evidence, or response details.

What the work can look like.

These are illustrative engagement patterns, not claims about named clients. Approved client experiences can be added here later with their real scope and wording.

01Identity compromise responseA time-sensitive engagement can combine account containment, session and recovery review, mail-flow investigation, evidence preservation, and downstream business verification.
02Cloud administrative reviewA focused review can map privileged roles, guest access, connected applications, recovery ownership, and the administrative paths that matter most to a cloud environment.
03Incident readiness exerciseA readiness engagement can expose unclear decision authority, evidence gaps, backup assumptions, vendor dependencies, and communication paths before an actual incident tests them.
Testimonials remain gated.

Draft testimonial identities that conflict with Blackpine employee names are not being presented as customers. Public client material will require approved attribution or an explicitly approved anonymous description.