Federal Missions
Offensive testing for federal missions.
Penetration testing, red teaming, vulnerability research, and autonomous attack simulation across IT and IoT, scoped under written authorization and delivered as reproducible technical evidence.
Company Profile
Offensive cybersecurity across IT and IoT
Offensive cybersecurity across IT and IoT | Federal missions
Pacific Global Security Group LLC (PacSec) delivers offensive cybersecurity capabilities across IT and IoT for the Federal Government. Our core capabilities are penetration testing, red teaming, vulnerability research, and autonomous attack simulation. We identify exploitable weaknesses, validate attack paths, and examine how compromise could affect the mission. Our work connects technical findings to the systems and operations they put at risk.
Where National Security Meets Native Innovation | Unconventional Security for Unconventional Times
Core Capabilities
Offensive capabilities for federal missions
Penetration Testing
Testing of networks, applications, and connected systems to validate exploitability and document demonstrated access or impact across IT and IoT.
Red Teaming
Adversary emulation built around a defined mission objective, with attack-path evidence and observations on detection and response.
Vulnerability Research
Investigation of software, firmware, and protocols to understand security weaknesses, establish their cause, and assess exploitability.
Autonomous Attack Simulation
Repeatable testing of approved attack scenarios to evaluate exposure and validate changes, with defined execution limits and operator oversight.
Testing covers IT and IoT together: connected devices, firmware, interfaces, applications, and the networks that carry them. RMF and ATO support, compliance and GRC, Zero Trust, incident response, and vCISO advisory are available when a mission requires them.
Mission Delivery
Representative work products
Penetration Test Report
Findings with the evidence behind them: what was tested, what was exploitable, what access it produced, and what remediation addresses it.
Red Team Operation Report
The operation narrative against the agreed objective, each successful attack path, and where detection or response held or failed.
Vulnerability Research Findings
Root cause, reproducible evidence, exploitability preconditions, and mitigation guidance for software, firmware, and protocol weaknesses.
Attack-Path Evidence
Records of how individual weaknesses connect into a path, including the commands, requests, and observations that support the claim.
Simulation Run Records
Approved scenarios, execution logs, stop conditions observed, and exposure results compared across runs.
Remediation Validation
Re-testing of the same conditions to confirm whether a fix closes the demonstrated path.
Methodology
How PacSec executes
01
Authorize
Written authorization, rules of engagement, and boundaries are agreed before any testing starts.
02
Scope
Targets, objectives, success criteria, execution limits, and stop conditions are defined with the mission owner.
03
Execute
Testing runs inside the approved scope, with operator oversight and defined escalation points.
04
Evidence
Results are documented as reproducible findings and reviewed with the customer, including validation of fixes.
Target Markets
Where we're positioned to support
PacSec targets mission requirements across the Department of Defense, federal agencies, defense primes, and critical infrastructure operators.
Engagement Planning
How an engagement is scoped
Planning starts from the mission objective and stays inside written authorization.
Mission objective
What the testing must answer, whether that is an exploitable finding, a defined adversary objective, or a validated scenario.
Target environment
The networks, applications, connected devices, and interfaces in scope, including operational technology where it applies.
Rules of engagement
Signed authorization, permitted actions, off-limits systems, escalation paths, and stop conditions agreed before execution.
Expected technical evidence
Reproducible findings, capture and command records, the attack paths that held, and re-testing after remediation.
Contracting
Contracting & Teaming Identifiers
Locations
Honolulu, HI · Austin, TX · Colorado · Washington DC · Japan · Switzerland
Native Hawaiian Organization Ownership
Owned by Kahiʻolani Foundation
PacSec is owned by Kahiʻolani Foundation, a Native Hawaiian Organization. Our ownership grounds the company in a responsibility to our customers and community.
Differentiators
How the work is delivered
Demonstrated Exploitability
Testing establishes what an attacker can actually do, not what a configuration review suggests might be possible.
Attack-Path Evidence
Findings are linked into paths, with the evidence that shows how one weakness leads to the next.
Mission Impact
Results describe the systems and operations placed at risk, so mission owners can act on them.
Repeatable Validation
Approved scenarios can be run again, so remediation is verified under the same conditions.
IT and IoT in One Scope
Enterprise IT and connected-device environments are tested together, including firmware, interfaces, applications, and networks.
Evidence for Technical Review
Deliverables are written to survive review by engineers, authorizing officials, and prime contractor technical staff.
Leadership Experience | Individual Experience
Executive experience of our founder
Founder and CEO Gerhard (Kuhaʻi) Rickert brings executive cybersecurity and critical-infrastructure experience across military, nuclear-energy, aviation and enterprise environments. Prior individual roles are distinguished here from Pacific Global Security Group LLC corporate contract performance.
U.S. Space / National-Security Missions
Experience supporting space-test/training cybersecurity, mission system assurance and associated RMF/ATO activities.
U.S. Army Futures Command
Prior ITaaS / Project Convergence cybersecurity, RMF/eMASS portfolio management and security policy/authorization-related work.
UAE Nuclear & Aviation
Prior cybersecurity leadership associated with Emirates Nuclear Energy Company and Abu Dhabi Airports / ADAC, including nuclear cybersecurity programs and aviation critical infrastructure.
DarkMatter / Deloitte Background
Founder previously held a leadership role at DarkMatter in Abu Dhabi and roles at Deloitte in Japan/U.S.
Engage PacSec
Start the conversation
Offensive capabilities briefing | Test scoping and rules of engagement | Prime/subcontract teaming | IoT and firmware research discussions | Autonomous attack simulation scoping
contact@pac-sec.com | www.pac-sec.com