OnDefend

OnDefend We empower the information security industry through our technological innovations and private-labele

We empower the information security industry through our technological innovations and private-labeled security force. BlindSPOT - Breach & Attack Simulation
Simulate ransomware, supply chain and other cyber-attacks to discover security control “blind spots”. Partner Support - Private-Labeled Security Force
Leverage our Information Security team to optimize your consulting bench strength and meet market demand.

Great to see some of our Washington D.C.-based crew connect in person decked out in their OnDefend swag.Jeremiah, Dele, ...
10/02/2026

Great to see some of our Washington D.C.-based crew connect in person decked out in their OnDefend swag.

Jeremiah, Dele, Gilbert, and Brandt made time to catch up last month for some face time and a quick photoshoot to appease a marketing team request (thanks, guys!). Despite the busyness of work and life, making the effort to stay connected in person like this is what continues to make OnDefend feel like a team, not just a company.

Check us out: https://hubs.la/Q04y9FH_0

Cybersecurity Awareness Month is a good reminder, but awareness alone doesn't stop bad actors.The organizations that hol...
10/01/2026

Cybersecurity Awareness Month is a good reminder, but awareness alone doesn't stop bad actors.

The organizations that hold up under pressure are the ones that test their defenses before someone else does: proving what actually works, closing the gaps where needed, and turning good intentions into practiced response.

That's the work we do all year, not just in October. Get the scoop: https://hubs.la/Q04y9BBP0

File extensions lie. An SVG can be executable code. A PDF can run JavaScript. And most upload validation still isn't che...
09/30/2026

File extensions lie. An SVG can be executable code. A PDF can run JavaScript. And most upload validation still isn't checking for either.

In this latest post, OnDefend pe*******on tester Jeremiah Nji breaks down three real attack scenarios hiding behind file uploads and why treating this as a "solved" problem is exactly how attackers get in.

Read it here: https://hubs.la/Q04ysG1v0

Known vulnerabilities account for only about a third of breaches. It's a topic OnDefend's Aaron Rosenmund consistently t...
09/29/2026

Known vulnerabilities account for only about a third of breaches. It's a topic OnDefend's Aaron Rosenmund consistently talks about when training our own internal red teamers.

That's because the other two-thirds happen in gaps like misconfigurations, forgotten settings, unaudited policies.

Here's the (semi) good news: Those gaps can be fixed quickly and effeciently once you know where to look.

At OnDefend we call it the 90/10 rule. It's the unique way we connect findings, prove the attack paths, and fix the smallest number of vulnerabilities that lead to eliminating the highest volume of risk.

More on the 90/10 rule: https://hubs.la/Q04yd1SC0

09/25/2026

Ten years. A decade of results often honored with awards. But none of that happens without the team behind it.

"The hard work that our team has put in is the only reason these (awards) are sitting on this table." - Chris Freedman, OnDefend CEO

Ten years of showing up, doing the work, and delivering for clients who needed a real and trusted partner. This is what that looks like.

Watch the clip below, then read the full story of our first 10 years: https://hubs.la/Q04xNbqX0

Your team could have every tool in the toolbox, and it can still feel like you don’t have full visibility into your envi...
09/24/2026

Your team could have every tool in the toolbox, and it can still feel like you don’t have full visibility into your environment.

That’s because most tools are built to see only a slice of risk in one domain (your app, network, or cloud, for example) but not the whole picture.

What’s worse, none of these tools were built to actually talk to each other, and what you often end up missing is the real risk that lives in the connections between those slices.

What’s required to see your full risk picture is a security provider built to connect risk across all of your domains.
More on this here: https://hubs.la/Q04xN8qm0

09/23/2026

Behind the Blog: "It's now context that matters a lot more than it does the old school method of ‘forget all previous instructions.’" That's OnDefend Lead Operator Erik Dominguez, and it's part of the story behind prompt injection's rise to the top of OWASP's AI risk list.

The old jailbreaks were one-shot moves. Today's attacks build up over a conversation until the model can't tell a legitimate request from a manipulated one. You have to test these systems deliberately, like an adversary would, before someone else does it for you.

Erik breaks it down more in the video below. For the full picture, read his blog, From Payloads to Persuasion: Insights from a Red Teamer on How AI Attacks Have Changed.
https://hubs.la/Q04xN2910

We see so many organizations waste valuable time and data after a pen test by switching vendors the very next year. Most...
09/22/2026

We see so many organizations waste valuable time and data after a pen test by switching vendors the very next year. Most pen tests capture your environment during one particular swath of time. Everything after that is drift. That's the gap a point-in-time test can't close and changing your vendor every year is old school thinking. We treat testing as an ongoing relationship instead of a once-a-year checkbox and then we leverage what we learn from prior tests to make our teams smarter and faster with each engagement.

See how we do it: https://hubs.la/Q04xM__g0

09/21/2026

Did you expect to fail? We asked OnDefend CEO Chris Freedman if he's had doubts about OnDefend during this 10 year journey.
"Sure, every founder feels that way. Ups and downs, ebbs and flows. But I have an unyielding belief in what we do. I have an unyielding belief in our team. And we're just getting started."

Persistence + an unyielding belief in what you're building and who you're building it with - it doesn't get much better than that.

Read more about the OnDefend journey and our path forward: https://hubs.la/Q04xnFbw0

Check out OnDefender Shana Williams in her 10 years of OnDefend special edition swag! Shana joined the team back in Febr...
09/18/2026

Check out OnDefender Shana Williams in her 10 years of OnDefend special edition swag! Shana joined the team back in February as a technical writer, a part of our service delivery team. Outside of work, she’s all about family – including time with her newest family member, a sweet and playful senior pup she’s started fostering this year. Thanks, Shana, for being an integral part of the team.
Take a minute to check out all of the great things happening at OnDefend: https://hubs.la/Q04xnLBs0

Address

10151 Deerwood Park Boulevard Building 200/Suite 110
Jacksonville, FL
32256

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm

Alerts

Be the first to know and let us send you an email when OnDefend posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to OnDefend:

Shortcuts

Share