This week, we welcome Christian Geyer, founder and CEO of ACTFORE, for a deep dive into the world of automated breach response. From his early days in military intelligence to founding a disruptive forensics firm, Christian shares how his diverse experiences shaped a data‑driven approach to tackling one of corporate America’s thorniest problems: managing the chaos of a data breach. Along the way we hear about secret clearances, cabinet making, and the humble beginnings of a startup launched from a literal closet.

Christian’s journey is anything but ordinary. Recruited straight into an intelligence agency at nineteen, he cut his teeth on top‑secret work before supporting Navy research labs with data dashboards that informed mission‑critical funding decisions. When an injury sidelined him from field ops, he turned to carpentry, framing houses and crafting cabinets during the mid‑2000s flip boom. That hands‑on trade remains Christian’s reminder that some skills can’t be automated, even as he builds AI to do the heavy lifting elsewhere.

He carried that disruptive spirit into Crypsis Group, undercutting the incident response market with half‑price forensics and skyrocketing revenue from zero to $20 million in four years. COVID’s budget cuts then prompted a pivot: leveraging ActiveNav’s data‑discovery engine to automate breach notification. What began as a side project in a shared office closet evolved into ACTFORE, a company that in a single four‑and‑a‑half‑day engagement processed 3 million patient records across 2 000 endpoints, cementing its reputation for speed, accuracy, and onshore security.

At the heart of ACTFORE’s offering is an automated extraction platform powered by “infant AI” tailored to each client. Rather than shipping data overseas for human review, Christian’s team uses software instances—deployed globally or on‑premise, to scan, fingerprint, and parse structured and unstructured files. Their Trace tool brings the automation into one‑click point‑and‑extract workflows, slashing keystrokes and crushing review timelines by weeks without sacrificing human‑in‑the‑loop oversight where it matters most.

Looking ahead, Christian warns of a new insider threat: AI models trained on proprietary data that could be weaponized from within. While ACTFORE continues to focus on reactive breach response, Christian sees advisory and proactive scanning services on the horizon, particularly in regions with more robust data regulations. As breach frequency rises and AI proliferates, ACTFORE aims to stay ahead of the curve, turning its combination of automation, human expertise, and a closet‑born scrappiness into the next frontier of cybersecurity.

Blue Sky: ⁠⁠@geeklawblog.com⁠⁠ ⁠⁠@marlgeb⁠⁠
⁠⁠⁠⁠⁠Email: [email protected]
Music: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Jerry David DeCicca⁠⁠⁠⁠⁠⁠⁠⁠⁠

Transcript