HOW A FEDERAL CASE
BECAME A CAREER.
LulzSec & The Sony Breach
Made worldwide headlines as a member of LulzSec. It was a period of arrogance, recklessness, and consequence. This experience didn't just teach me how to break systems; it taught me how fragile they truly are.
Federal Custody & Reflection
Serving time in federal prison changes your perspective on risk, consequence, and humanity. I spent this time deconstructing where I went wrong and planning how to use my skillset constructively.
Starting From Zero
Joined an MSP at the lowest level with everything to prove. I wasn't there to be the "reformed hacker." I was there to show I could build, not just break. Every ticket, every escalation, every late night was a step toward earning trust in an industry that had every reason to doubt me.
Offensive Security Engineer
Moved into offensive security. Pentests, red team engagements, adversary simulation. The same skills that got me arrested turned out to be valuable when applied with permission and purpose.
Security Operations Architect
Built a SOC from the ground up. Hired analysts, wrote detection logic, established IR procedures. Learned firsthand which processes hold up under pressure and which ones collapse the moment something real happens.
Joined Galactic Advisors
I'd spent years running security operations at an MSSP, protecting a full roster of clients at once. Galactic Advisors was the chance to go wider still: not one provider's clients, but the entire MSP community. I came on to bring what worked to a whole industry, and help every MSP that wanted it get further along its security journey.
BSides Peoria & Illinois Cyber Foundation
Co-founded BSides Peoria and the Illinois Cyber Foundation. Central Illinois needed a security community and nobody was building one. 120+ attendees in year one. Now focused on mentoring the next generation and advocating for people who deserve a second chance in this industry.
Principal Security Advisor
Stepped into high-level advisory, keynote speaking, and vulnerability research at Galactic Advisors. Led security strategy while continuing community work through the Illinois Cyber Foundation and BSides Peoria. Mentored at-risk youth and advocated for second chances in the security industry.
Director of Security Research
Promoted to lead security research at Galactic Advisors, end to end: finding the vulnerabilities, running coordinated disclosure, and publishing the CVEs before someone with worse intentions does. I take the findings to the stage, and keep mentoring people who deserve a second chance in this industry.
Frequently Asked
Who is Cody Kretsinger?
Cody Kretsinger is the Director of Security Research at Galactic Advisors, where he leads vulnerability research and coordinated disclosure. He co-founded BSides Peoria and the Illinois Cyber Foundation, presents and keynotes security conferences, and co-authored Level Up: vCSO Edition. His focus is finding real flaws before attackers do, and making practical security reachable for the organizations that need it most.
What does Cody Kretsinger research?
He specializes in vulnerability discovery and coordinated disclosure, publishing CVEs in the software that MSPs and their clients depend on. His work ranges from credential-storage flaws in widely deployed assessment tools to internet-exposed industrial control systems, always paired with responsible disclosure to the affected vendors.
What does Cody Kretsinger speak about?
Cody delivers keynotes and technical briefings on the modern threat landscape, the attacker mindset, incident response, and his own research. He has spoken at conferences including GrrCon, BSides, and Zero Trust World, translating how attackers actually operate into terms executives and practitioners can act on. His talks are first-person and pitch-free.
Who does Cody Kretsinger work with?
Cody's primary focus is MSPs, MSSPs, and the clients they protect. He researches the vulnerabilities in the tools they rely on, advises on security practices that scale, and co-authored Level Up: vCSO Edition as a practical playbook for it. That work reaches further too: he has partnered with SMBs and enterprises, and his research and talks apply to any organization serious about its security.
What are BSides Peoria and the Illinois Cyber Foundation?
Cody co-founded both to grow the security community in Illinois. BSides Peoria drew more than 120 attendees in its first year, and the Illinois Cyber Foundation carries that work further, mentoring the next generation of security professionals and advocating for people who deserve a second chance in the field.
What has Cody Kretsinger published?
He co-authored Level Up: vCSO Edition with Bruce McCully, a practical security framework for MSPs and MSSPs, and he is the researcher behind multiple published CVEs. He also writes regularly on security research and the threat landscape at codykretsinger.com/blog.
Where can I watch or listen to Cody Kretsinger?
Cody is a regular podcast and video guest on the modern threat landscape, attacker psychology, and the realities of security work, with appearances including Pax8's The Game and Hacker and the Fed. His media and writing are collected at codykretsinger.com.
Where is Cody Kretsinger based?
Cody is based in Illinois and speaks and advises with organizations nationwide.
Is Cody Kretsinger available for speaking or advising?
Yes. Cody is available for conference keynotes, executive roundtables, private corporate events, and security advisory work. Booking inquiries go through the contact page at codykretsinger.com/contact.
How do I reach Cody Kretsinger for media or press?
Cody welcomes interview, podcast, and press inquiries. A media kit with bios, headshots, and ready-to-use intro scripts is available at codykretsinger.com/press-kit, and requests can be sent through the contact page.
What happened with LulzSec, and where is Cody Kretsinger now?
In 2011, Cody was a member of the hacking group LulzSec and took part in the breach of Sony Pictures. He was arrested, pleaded guilty, and served his sentence. Every year since has gone into rebuilding: learning security from the ground up, earning back trust, and turning that experience into a career spent defending the kinds of organizations he once would have targeted. Today he leads security research at Galactic Advisors and advocates for second chances in the field.