About
Why Oakmont exists
Security tools have gotten a lot more capable. Most companies haven't had the in-house time or expertise to configure them to return the most value. Oakmont exists to do that work directly, without requiring a client to hire a full-time security engineer.
Security vendors sell platforms. Managed service providers sell monitoring.
Oakmont solves the engineering gap between what a security platform can do and what it's actually doing in your environment.
We are an independent security engineering firm. We scope the work, engineer the solution, document what we changed, and hand it back to your team.
We don't sell security products, we don't earn commissions on the platforms we recommend or implement, and we don't operate a 24/7 SOC. What we do is engineer your security environment.
Oakmont works with small and mid-sized organizations that have made meaningful investments in security platforms such as CrowdStrike, Microsoft 365, Splunk, Elastic, and other enterprise security technologies, but don't have the specialized engineering expertise to get the most from them.
What We're Not
Clear about the edges of the work.
Not a managed security service provider
We don't monitor your environment around the clock, and we don't take over your alert queue.
Not a reseller
We don't earn commissions on the tools we recommend or implement, which is what lets the recommendation be worth something.
Not a staffing firm
We don't place engineers at your site on time-and-materials and bill by the hour indefinitely.
An independent engineering firm
We scope the work, do the work, document it, and hand it back to the people who'll live with it.
What's Next
Engineering, and eventually tooling.
The same gaps keep showing up across engagements: exclusion lists nobody can inventory, detection coverage nobody can see at a glance, configuration drift that only surfaces during an audit.
Oakmont is building internal tooling around that work, and some of it may eventually end up as software clients can run themselves. It isn't a product line today and nothing on this site is sold as one, but if that's a direction you'd find useful, it's worth raising when we talk.
Work with engineers who care about outcomes.
If you've invested in security tools and aren't sure they're working, we can help.