About
A security firm built around finishing the work
Kindroot exists because of a pattern we kept watching. An organization pays for an assessment, receives a thick report, files it, and sits in the same position a year later, except now the gaps are documented. The consulting model that produces this outcome is profitable. It just doesn't make anyone safer.
So we built the firm around the other half of the work. We still assess, test, and advise, and we do it carefully. But everything points toward implementation: platforms deployed and tuned, access restructured, infrastructure hardened, people trained, and a documented handoff so your organization owns its own security when we step back.
How we operate
Implementation is the job
The industry produces excellent documents and unprotected organizations. We took the opposite bet. An engagement is finished when the fixes are running and your team knows how to keep them running, and not a day before.
Honesty over theater
If something in your environment is fine, we say it's fine. If a framework demands a control that adds nothing for you, we'll implement it because you need the certification, and we'll tell you it adds nothing. If we're not the right firm for a project, you'll hear that on the first call.
No referral money
We don't take commissions from platform vendors. When we recommend an EDR product or an identity provider, the only thing riding on that recommendation is whether it works for you.
Sized to be senior
Kindroot is deliberately small. The people who scope your engagement are the people who do the work. There's no handoff to a bench of juniors after the sales call, because there is no sales call and there is no bench.
Where we work
Rooted here on purpose
We're based in Washington State and work across Washington, Oregon, and Idaho. Staying regional is a choice. It means we can be on site when the work calls for it, we understand the regulators and insurers our clients answer to, and our reputation lives where our clients do.
Plenty of the work happens remotely, and much of it should. But when you're rebuilding the network that runs a plant, or walking a leadership team through what a pentest found, being in the room matters. The Northwest respects work done well and quietly. That suits us.
The first conversation costs nothing and commits you to nothing.
Tell us what's on your mind. A question, a concern, a project that's been waiting. We'll tell you what we'd actually do about it, and whether we're the right firm to do it.