Digital security for the people who hold power to account.
I'm Hisham Almiraat. For more than a decade I've helped journalists, human rights defenders, and nonprofits around the world make sense of digital threats and stay safe — with practical assessments, policies people actually follow, and training that sticks. Adso Security Consulting is my independent practice.
Get in touch →Services
Risk assessments & audits
Structured review of your organization's digital security posture — threats, exposure, and practical priorities. Clear findings, no fear-mongering.
Security policy development
Information security policies and procedures that fit how your teams actually work — proportionate, usable, and maintainable.
Training & awareness
Hands-on security training for editorial and operational staff — from source protection basics to advanced threat scenarios.
CISO as a service
Interim or project-based information security management for organizations that need senior security leadership without a full-time hire.
Who I work with
Newsrooms and investigative teams, press freedom and digital rights organizations, and NGOs operating in high-risk environments — in the Netherlands and internationally. If your work makes you a target, my work is keeping you safe while you do it.
Who you'll be working with
I came to security the hard way. A doctor by training, I co-founded Mamfakinch, a Moroccan citizen-media platform that won Google and Global Voices' Breaking Borders Award in 2012 — and was then targeted with government-grade spyware, in a campaign later documented by Citizen Lab and Amnesty International, and prosecuted for my advocacy. Digital security stopped being theoretical for me a long time ago: I know what it feels like to be on the receiving end.
Since then I've spent over a decade turning that experience into protection for others — as advocacy director at Global Voices, in information security roles at Justice and Peace and Free Press Unlimited, and today as chief information security officer at one of the world's most renowned investigative journalism organizations. I've trained hundreds of journalists and human rights defenders, and worked alongside the people at Citizen Lab, Amnesty Tech, Access Now, and newsrooms across the globe.
I believe security isn't about technology — it's about people. My job is to bring empathy and clarity to a field that usually offers neither, and to make complex threats feel understandable and manageable.
And the name? Adso of Melk — the apprentice in The Name of the Rose who solves mysteries through patient observation and methodical reasoning. The qualities good security work demands.
How I work
- Confidential by default. Client work is never named or referenced without written permission. NDAs welcome.
- Secure channels. Reach me over Signal or encrypted email — see contact below.
- Nothing to track here. This site loads no third-party scripts, no analytics, no cookies. Check the network tab — I encourage it.
- Practical over perfect. Recommendations are prioritized by real risk and what your team can actually sustain.
Contact
- hisham@adsosecurity.nl
- Signal
- [your-signal-username]
- PGP
- [key fingerprint — link to /pgp.txt]