ABOUT
The red teamer who talks to boards.
Most red teamers can hack but can't talk to a board. Most consultants can talk to a board but can't hack. The whole career has been about doing both.
THE STORY
It started with a critical vulnerability in my university's network. Finding it was easy; explaining to the people in charge why it mattered was the hard part. That gap, between what attackers know and what decision-makers hear, became the career.
At the Bank of England I ran penetration testing and red teaming, and helped build CBEST: the first regulator-led framework for intelligence-driven red teaming of financial institutions. CBEST became the parent of TIBER-EU and, later, DORA's TLPT regime.
From there: leading offensive security operations at a UN agency; red teaming across banking, insurance and critical infrastructure; and founding Cytadel, where AI-enhanced red teaming is the whole business.
The stage work exists because the biggest gap in security isn't technical. The organisations that get breached had the reports, the tooling, the budget. What they didn't have was a leadership team that had felt what an attack looks like. A live deepfake of your own CFO does what no slide can.
CAREER
Where the scars came from.
AI-enhanced red teaming for regulated organisations. The engine behind the talks.
Red team lead: adversary simulations across global health infrastructure.
Built and led the central bank’s offensive testing. Contributed to CBEST: the framework behind TIBER-EU and DORA TLPT.
Penetration testing for Fortune 500 clients globally: social engineering, web applications, infrastructure.
▸ Recognition
ON THE RECORD
"Through collaboration with Cytadel, our clients proactively strengthened their cybersecurity defenses and are now better prepared for the evolving threat landscape. I endorse Cytadel and Manit personally to any organization seeking to enhance their security resilience."
CREDENTIALS
THE ECOSYSTEM
One flywheel, several doors.
Cytadel
AI-enhanced red teaming for regulated organisations. The engine behind the talks.
The feedHacked dAily
My daily cyber podcast: the threats that matter, cut to the signal and produced with AI.
The signalAttack-flow breakdowns of real incidents, AI tool tests, and what's coming next.
The referencedoratlpt.com
The plain-English guide to DORA threat-led penetration testing, written from the CBEST lineage.