About

The expert behind
every engagement

Triskel Security is Martin Vigo’s boutique offensive security practice: senior-led consulting backed by original research, international conference talks, public media credibility and judicial expert credentials. You work directly with the same expert from scoping to final debrief.

Engagements delivered
0 +
Vulnerabilities discovered
0 +
Years in offensive security
0 +
Talks at major conferences
0
Authority Narrative

Why buyers
trust the work

Triskel is positioned around a simple idea: the same person doing the work is also the person whose research is cited publicly, invited to speak internationally and trusted to explain technical facts in legal settings.

Original research

Methods tested in public

Martin’s research into account takeover, voicemail abuse, password reset weaknesses and mobile ecosystems is not generic commentary. It is hands-on offensive work that has been published, presented and scrutinized publicly.

Public credibility

Recognized beyond security circles

Conference stages, mainstream press, radio and television appearances show that his expertise is trusted both by technical audiences and by media outlets that need clear, accurate cybersecurity commentary.

Commercial relevance

Applied to real client work

The value for clients is direct: research-led tradecraft, executive-ready communication and work that remains personally led rather than delegated to junior delivery teams.

That combination matters because it is rare to find one practitioner who can operate technically, communicate publicly, and also deliver advisory or judicial work with the same level of credibility.

Founder & Lead Consultant

Martin Vigo

Founder · Perito Judicial · Offensive Security Consultant

Martin’s research into account takeover, voicemail abuse, password reset weaknesses and mobile ecosystems is not generic commentary. It is hands-on offensive work that has beaMartin Vigo is a Red Teamer and security researcher with a background in Product Security and Software Engineering. He founded Triskel Security to offer offensive security work that remains senior-led, technically rigorous and directly useful to decision-makers.

His public research covers account-takeover attack paths, password reset abuse, voicemail security weaknesses and mobile ecosystem vulnerabilities. Martin has presented this work internationally at conferences including DEF CON, Black Hat, BSides Las Vegas, 35C3 and Ekoparty, and he co-hosts the Spanish cybersecurity podcast Tierra de Hackers.

As an officially licensed Perito Judicial en España, he also provides court-admissible expert opinions for legal proceedings involving cybersecurity incidents, digital evidence and technical causality analysis.en published, presented and scrutinized publicly.

Client quote

“Martin and Triskel exposed attack paths we had never modeled. Their executive debrief changed our security roadmap in one session.”

CISO · Global fintech group (anonymized)

Client quote

Tierra de Hackers

I co-host Tierra de Hackers, a Spanish-language cybersecurity news podcast focused on attacker tradecraft, incidents and practical defensive strategy. It is a visible part of my public work and one of the channels through which I communicate security to a broad audience.

Research & Public Speaking

Research projects
& conference talks

Research projects, conference presentations and practical
contributions to the security community.

Compromising online accounts by cracking voicemail systems

DEF CON 26 · Las Vegas · 2018

2018

From Email Address to Phone Number

DEF CON 27 Recon Village · Las Vegas · 2019

2019

Phonerator - An advanced valid phone number generator

martinvigo.com · OSINT research project · 2020

2020

Do-it-yourself spy program: abusing Apple's call relay protocol

martinvigo.com · iOS security research · 2016

2016

Even The LastPass Will Be Stolen, Deal With It!

Black Hat Europe · Amsterdam · 2015

2015

Talks

More talks
& recordings

Conference presentations and deep-dives available on video.

Do-it-Yourself Spy Program: Abusing Apple's Call Relay Protocol

Ekoparty · Buenos Aires · 2016

From email address to phone number

BSides Las Vegas · 2019

35C3: Compromising online accounts by cracking voicemail systems

35C3 · Leipzig · 2018

Talks

More talks
& recordings

Conference presentations and deep-dives available on video.

MITRE ATT&CK

Adversary tactics and techniques framework used to structure and report all Red Team scenarios

PTES

Penetration Testing Execution Standard — methodology for consistent, thorough assessments

OWASP

Web application security testing guided by the OWASP Testing Guide and WSTG

TIBER-EU

Threat intelligence-based ethical Red Team framework for financial sector engagements

contact

Want to work
together?

Tell us about your organisation and we’ll scope the right engagement.