REAL-WORLD
EXPERIENCE
Practical experience across complex environments and high-consequence systems.
ABOUT
Small by design.
Institutional in delivery.
PRACTICAL SECURITY FOR A MORE RESILIENT WORLD.
Black Bag Security is led by Duncan Stirling, an independent security professional focused on penetration testing, security engineering, and offensive research.
The work is grounded in real-world experience, a disciplined engineering approach, and a commitment to practical, measurable outcomes that help organizations reduce risk and operate with greater confidence.
THE APPROACH
Experience. Discipline. Better Outcomes.
REAL-WORLD
ENGINEERING
MINDSET
Custom tooling, repeatable methods, and evidence-driven results.
ADVERSARY
PERSPECTIVE
Offensive research informs stronger defensive outcomes.
MEASURABLE
IMPACT
Clear, actionable findings that support risk reduction and more resilient organizations.
SENIOR ACCOUNTABILITY
Led by a practitioner.
Focused on what matters.
I believe security should be practical, transparent, and geared toward real outcomes. The goal is not just to find problems, but to help organizations build stronger, more resilient systems, teams, and decisions.
— Duncan Stirling
FOUNDER, BLACK BAG SECURITY
WORK TOGETHER
A more resilient tomorrow
starts with a conversation.
Tell us about your environment, your challenges, and what better looks like. We'll find the right way to engage.
Start the Conversation