Security Automation
SOAR builds, platform migrations, and 100+ integrations that make your security tools actually work together.
Learn moreEnterprise-grade security. Neighbor-grade service.
I'm John Sabo — 30 years securing platforms at GoDaddy scale. Now I help Arizona small businesses automate security, harden their websites, and recover from account lockouts. You call, I answer.
30+
years in cybersecurity
Billions
of attacks blocked daily by the WAF I built at GoDaddy
400PB
of breached data recovered
100+
security platform integrations built
How I can help
Six services, one person who answers the phone.
Security Platform Management
Your SOAR, ticketing, and threat intel platforms — fully managed, monitored, and improved by me.
Learn more
Website Hardening & GEO
Protect your site from attacks and make it visible to AI search assistants like ChatGPT and Perplexity.
Learn more
Penetration Testing
Real-world attack simulation for small-business websites and networks, with a fix-list you can act on.
Learn more
Facebook Portfolio Restoration
Lost your Facebook Business Portfolio or Page to a lockout? I run the full Meta recovery process for you.
Learn more
Deep Intelligence Research
Breach exposure checks, domain intelligence, and threat research on anyone or anything that matters to your business.
Learn moreSOAR for Everyone — security automation, fully managed
SOAR platforms were sized and priced for enterprises, and they took about six months to deploy. Mine starts working in as little as two weeks, is run end-to-end by me, and you can cancel anytime.
- Operational in ~2 weeks
- IOC enrichment included
- IR playbooks mapped to MITRE ATT&CK
- At-will cancelable, US-based
The Lono Security bill of rights
- Affordable fully managed SOAR
- Operational within 14 days
- IOC enrichment included
- Industry-leading IR playbooks
- Code-based SOAR power without the management burden
- Deep-forensic case management
- At-will cancelable service
- 5 free development hours every month
Case study
A Mesa family farm lost its entire Facebook Business Portfolio to a Meta lockout. I ran the recovery end-to-end — and got every Page and admin seat back.
Read about the service
JS
Meet John
One person, thirty years, and a phone number you can actually call.
- Built GoDaddy's internal web application firewall ("Cerberus")
- Swimlane-certified SOAR architect for Fortune 500 clients
- Recovered nearly 400 petabytes of stolen data sets.
Common questions
Every job is quoted after a free 30-minute consult. No surprise invoices, ever.
Yes — on-site around the Phoenix Metro, remote everywhere.
Automations typically go live in about two weeks. Urgent lockouts and incidents, same week.
One person, one phone number: 602.501.0772. Call it.