About
You deal with the owner.
Not an account manager, not a ticket queue, not a junior analyst. The senior engineer who scopes the engagement, runs the exploits, writes the findings, and sits across the table from you and your team afterwards.
The founder
Phillip Austin Green
Stonepath IT is run by Phillip Austin Green. He scopes the work, does the work, writes the findings and sits in the readout. When you call, you get him or you get a call back from him.
The firm is deliberately small and the plan is for it to stay that way. A handful of clients served properly is a better business than thirty served thinly, and it is the only version of this that can promise you the owner answers the phone.
If a question falls outside what he knows, you will be told that plainly, and told who does know. That happens in every technical trade and the only bad version is the one where nobody says it.
Where the range comes from
The firm is new. The trade is not.
Four employers, on the public record under his own name, so any of it can be checked before you pick up the phone.
-
2000 to 2005
United States Air Force
Staff Sergeant, information systems, stationed in England. Directed squadron IT operations, supervised a team of six, ran secure Oracle backed command systems, and held an active Secret clearance.
-
2013 to 2019
DATAprime
Network engineer. Cisco and Fortinet cores, structured cabling, fiber, VLAN segmentation, quality of service, VoIP and site to site VPN, for new construction, renovations and office moves. One of those builds was a tribal medical center in Oklahoma under HIPAA and HITECH controls, where imaging and clinical traffic were segmented away from the general and guest networks.
-
2020 to 2023
TeamLogic IT
Project engineer at a managed services provider. Tier 3 Windows Server, Active Directory, group policy and DNS, Azure AD synchronization, Office 365 migrations, scripting to speed up forensic analysis, and prompt engineering for client automation back when almost nobody at an MSP was doing that. That last part is where this work started.
-
2023 to now
botzr corp.
Independent security reviewer and infrastructure engineer. Systems software in Rust, eight packages published on crates.io, and two preprints with DOIs on agent memory provenance and identity stability.
That last one is the only claim on this site you can check in under a minute, so here is where to look: the packages are public. The rest is employment history and it is fair game for any question you want to ask on the call.
How he works
Five habits, and you can hold him to them.
- Authorized, scoped, isolated
- Rules of engagement in writing, a target you authorize, and deny-by-default on anything that reaches out. Nothing in production is changed without a separate agreement.
- Written first, then done
- Scope, price, hour cap and the out of scope list exist on paper before the work starts. If the work turns out to be bigger, you hear it before the hours are spent, not on the invoice.
- The limits in the same size type
- What is not included is printed as plainly as what is. Finding out later is worse for you, and it is worse for us.
- Plain language, no theater
- No slide about hooded figures, no countdown, no borrowed statistic. If a risk is serious you will be told what it is, what it would cost you, and what it takes to close it.
- Documentation you keep
- Your environment is documented for your benefit and handed over on request, including on the way out. Nobody should stay with a vendor because leaving is a mess.
Boundaries
What he will not do.
The habits above are how the work goes. These are the five places it stops, and they are the ones worth holding him to, because each one costs this firm money to keep.
-
Sell you a product to hit a vendor tier
If a tool does not earn its place in your environment, it is not going in, whatever the margin on it looks like.
-
Quote before looking
A price that arrives before anyone has seen the environment gets revised upward later. That is not a quote, it is an introduction.
-
Use your name without asking
No logo goes on this site, into a proposal, or into a conversation with another prospect unless you have said yes to it in writing.
The obvious question
Stonepath IT is new.
People usually mean one of two things by that, and they need different answers, so here are both.
Can he actually do the work? The record above is one answer, and the published tooling and preprints are checkable today. The cheaper answer is to scope a small engagement and read the findings. If the work is not good, you will know quickly, you will still have the pack, and you decide what happens next.
Will the firm still be here in eighteen months? A fair question and nobody can prove the future. What can be said: this is the only thing he does, and the findings, the coverage matrix and the harness are yours to keep and to hand to any other team.
Stonepath IT is the red team. Botzr Research, the research lab of botzr Corp, is the blue team. dreamd.dev, a brand of botzr Corp, is the front door that connects the two.
Have him look at yours.
A fixed-scope engagement, a report and a test suite you keep, and a straight recommendation at the end of it.