Lagoda Security georgy@lagodasec.com

Georgy
Lagoda

Founder & Principal Security Researcher

Cryptographic Security · Vulnerability Research · Low-Level Systems Security

Explore services Discuss a project
Sections

Lagoda Security is the independent cybersecurity practice of Georgy Lagoda. I help businesses identify vulnerabilities, review security architecture, and make informed decisions about protecting their systems.

My work combines hands-on security research with experience as a CISO and CEO, connecting technical findings with engineering priorities and business needs.

“George emanates a rare combination of technical talent and leadership… I would not hesitate to recommend George based on the values that he upholds: ethics, hard work and the pursuit of the best.”

Kelly Robertson Principal Security Practitioner · Zisher InfoSec · United States Former colleague View recommendation on LinkedIn

Services

  • CRYPTOGRAPHY

    Primitives, protocols, implementations

    Cryptographic Security

    Security analysis of cryptographic implementations, primitives, protocols, and implementation-level behavior.

  • VULNERABILITY

    Authorized assessment and validation

    Vulnerability Research

    Authorized vulnerability assessment, technical investigation, reproduction, and controlled validation.

  • SYSTEMS

    Binary, kernel, instruction set

    Low-Level Systems Security

    Security analysis at software, binary, operating-system, instruction-set, and processor architecture levels.

  • HARDWARE

    Processor behavior and boundaries

    Hardware & CPU Security

    Research into processor behavior, hardware/software boundaries, implementation-level security properties, and mitigations.

  • ENGINEERING

    Architecture, review, advisory

    Security Engineering

    Architecture review, security design, implementation analysis, and technical security advisory.

Current research spans cryptographic implementation security and processor-level security — low-level implementation analysis, software/hardware security boundaries, and the validation of security mitigations.

  • Cryptographic implementation security
  • Processor-level behavior
  • Optimization and security trade-offs
  • Low-level code analysis
  • Instruction-level behavior
  • Validation of security mitigations

Selected research and client engagements are subject to confidentiality obligations.

  1. Present

    Independent practice — Lagoda Security

    Cryptographic security, vulnerability research, and processor-level security research, alongside technical advisory work on cryptographic hardware and processor-platform security engineering.

  2. 2016–2026

    Executive and advisory roles — Technology and digital-transformation organizations

    Product strategy, market development, and public-sector technology programs.

  3. 2012–2019

    CISO (Chief Information Security Officer), then CEO — SEC Consult

    Vulnerability research, application and infrastructure security assessments, and security-methodology development at an Austrian-headquartered international cybersecurity company; leadership of technical security teams across international engagements.

  4. 2011–2012

    Information Security Expert — Chronopay

    Source-code security review and compliance-driven remediation for an international payment system, including PCI DSS / OWASP / WASC-aligned work and real-time integrity monitoring.

  5. 2007–2012

    Software Developer — Microsoft Lab, Lomonosov Moscow State University

    Scientific and mathematical software engineering — the systems foundation for the security work that followed.

Cybersecurity experience spanning projects across 11 countries, including engagements across banking and financial services, automotive, insurance, payment systems, and public-sector infrastructure.

Extensive security assessment experience across the EU & APAC banking sector.

Much of this experience was carried out through SEC Consult's international project teams; individual client relationships remain confidential.

Currently conducting dissertation research in cryptography, with a focus on cryptographic implementation security, optimization, and processor-level implementation characteristics.

Lomonosov Moscow State University, Faculty of Computational Mathematics and Cybernetics.

  • cryptography
  • implementation security
  • processor architecture

Security research and intrusive testing are conducted only within explicitly authorized contractual scopes, with defined Rules of Engagement and, where applicable, Permission to Attack documentation specifying the systems and methods that may be tested.

How engagements work

  1. Project context and objectives

    Initial discussions with the client establish the project objectives, priorities, and tasks, including the client's current understanding of threats to the system.

  2. Scope and authorization

    The scope, deliverables, and required permissions are agreed with the client before technical work begins.

  3. Technical work

    The work is carried out within the agreed and authorized scope, using methods appropriate to the system and the objectives of the engagement.

  4. Results and discussion

    Findings are presented and discussed with the client, with their implications and the limitations of the work clearly explained.

Discuss a project

Tell me about your project: describe the task, the type of system involved, and your preferred timeframe.

Please do not send passwords or confidential materials in your first message.

Georgy Lagoda

Founder & Principal Security Researcher

Lagoda Security

Add to contacts (.vcf) QR code containing Georgy Lagoda's contact details

Scan to add contact