Give security leaders complete clarity over their security stack.

ESProfiler was founded by Louis Holt after more than fifteen years across cyber forensics in counterterrorism, policing cyber strategy, and enterprise security. His career has spanned BT's Computer Emergency Response Team, the build-out of high-volume security analytics capability, enterprise customer transformation at Symantec and Broadcom, and independent advisory work across sectors and vendors. That breadth gave him a perspective few security leaders get to see: from C-level strategy through to the realities of ground-level delivery.

Across all of that work, one pattern kept repeating.

“I knew this would happen.”

After incidents, the answer was often already inside the organisation. The capability existed. The insight existed. But it had not reached the right people, at the right level, in time to change the outcome.

The same pattern appeared in security investment decisions. Organisations had bought tools that did not match their actual requirements. Teams were frustrated. Technologies were underused, duplicated, or abandoned. Licences kept renewing, storage costs kept accruing on hardware that was never deployed, and security leaders were left trying to understand whether the stack they had often inherited was really reducing risk.

The problem was rarely negligence. It was complexity.

At enterprise scale, no one person can hold the full picture of a security estate. Capability knowledge is scattered across vendor documentation, RFP responses, spreadsheets, contracts, architecture diagrams, procurement records, and the lived experience of people on the ground. Security leaders need to know what they have, what it does, what it costs, where it overlaps, where the gaps are, and how it maps to the threats and frameworks that matter, but those answers are often fragmented, manual, slow, and hard to produce.

That conviction became the foundation of ESProfiler.

Cybersecurity is the business of revenue protection. Every investment in the security stack should contribute to reducing risk, improving resilience, or enabling the business to operate with confidence. Yet too much time and money is lost simply trying to understand the environment: what tools exist, what capabilities they provide, how they are deployed, and whether they are delivering value.

As a consultant, Louis could help individual organisations build that picture through interviews, analysis, and deep engagement with teams. But the problem was too large, too distributed, and too persistent to solve manually.