OUR STORY
Our founders spent their careers inside the U.S. government’s most demanding security environments — conducting offensive operations, vulnerability assessments, and threat analysis at the Department of Defense level. These weren’t theoretical exercises. They were real-world operations against real adversaries, where the stakes were national security and the margin for error was zero.
You work with the expert.
Our background is different.
There is a significant difference between an IT security professional and a practitioner who spent years conducting offensive security operations at the Department of Defense level. We are the latter. That experience informs how we think about threats, how we conduct assessments, and what we look for that others miss.
Who founded Thorium Information Security and what is your background?
Thorium was founded by security professionals who spent their careers conducting offensive security operations and vulnerability assessments at the Department of Defense level. When we transitioned to the private sector we saw a consistent gap — organizations that handle sensitive data and carry real compliance obligations were being served by generalist firms staffed with career IT consultants who had never operated in a genuinely high-stakes environment. We founded Thorium to fill that gap.
What industries do you work with?
We work with organizations across sectors — credit unions, community banks, healthcare providers, nonprofits, higher education institutions, local and state government agencies, and others. What our clients share is not their industry. It's a commitment to taking security seriously and a need for expertise that meets that standard.
Are you a managed security service provider (MSSP)?
No. Thorium is a security consulting and assessment firm. We do not provide continuous network monitoring, 24/7 SOC services, or managed alerting. Our practice is built around high-quality assessment and advisory work — penetration testing, compliance audits, risk assessments, and strategic guidance. That focus is deliberate and it is what allows us to do each of those things at a high level.
Do your practitioners hold certifications?
Yes. Our team holds industry-recognized offensive security and compliance certifications. More importantly, our practitioners have applied those skills in real-world government environments — not just in lab settings or certification exams. Credentials matter. Operational experience matters more.
How do you protect the sensitive information you access during engagements?
With the same seriousness we applied to classified work. We sign NDAs as a standard part of every engagement. Data collected during assessments is handled under strict need-to-know protocols, stored securely, and destroyed at the conclusion of the engagement unless retention is agreed upon in writing. We do not reference client environments, share findings with third parties, or retain sensitive data beyond what is necessary to deliver your report.
Are you licensed and insured?
Yes. Thorium carries professional liability (errors and omissions) insurance and general liability coverage. Certificates of insurance are available upon request during the contracting process.
Thorium Information Security, LLC.
Hayden, Idaho, USA
(208) 352-2877
Sales@ThoriumInfosec.com