About
About Crush Security
Cybersecurity consulting and security intelligence, built by practitioners who got tired of watching organizations buy the wrong tools.
The problem we solve
Most organizations don't have a vendor problem. They have a visibility problem. CISOs are buried under sales pitches, analyst quadrants, and point solutions that overlap, leave gaps, or both. Security budgets grow while actual coverage stays flat, and compliance becomes a checkbox exercise disconnected from real risk posture.
We built Crush because we lived this from the advisory side, watching clients stack tools they didn't need, miss categories they didn't know existed, and make six-figure decisions based on a peer's recommendation at a conference.
Who we are
Crush Security is a cybersecurity consulting firm and security intelligence platform, founded in 2026 and headquartered in Wyoming. We operate at the intersection of hands-on consulting and AI-powered vendor intelligence, helping organizations understand what they have, what they're missing, and what to do about it.
We're not a reseller pretending to be objective, and not a SaaS tool pretending to replace your security team. We're consultants first, backed by a platform that makes our advisory work faster, sharper, and evidence-based.
What we do
Advisory, amplified by a platform
Advisory & consulting
Penetration testing, compliance certification, architecture reviews, and vendor strategy. A legitimate auditing body, not a referral shop.
The Crush platform
Cassandra sits on the proprietary Crush Cyber Vendor Taxonomy, mapping your stack to real control frameworks, finding gaps, and recommending vendors.
Threat intelligence
A dedicated platform tracking emerging threats, vulnerability trends, and adversary behavior, keeping decisions grounded in current risk.
What makes us different
Practitioner-built, evidence-first
Practitioner-built
Designed by people who've sat across the table from CISOs, not people who've only written about them.
Advisory-first
Technology amplifies our consultants, it doesn't replace them. AI handles pattern matching; humans handle judgment and accountability.
Structured intelligence
The Crush Cyber Vendor Taxonomy lets us classify, compare, and score coverage. When we say there's a gap, we show exactly where and why.
Leadership
Who's behind Crush
Josh Jones
Chief Executive Officer
Co-Founder
Josh Jones brings nearly two decades of cybersecurity experience spanning enterprise sales, vulnerability management, and security strategy. A U.S. Air Force veteran, he built his career helping Fortune 100 organizations navigate complex security decisions. At Crush Security, Josh leads strategic vision, client relationships, and go-to-market execution. He founded the company around a simple observation from hundreds of conversations with CISOs: the cybersecurity ecosystem was built for complexity, not clarity, and his mission is to change that.
Ohio State University, B.S. Business Management & Sociology
Clayton Riness
Chief Operating Officer
Co-Founder
Clayton Riness has spent over 16 years in cybersecurity with deep expertise in incident response, risk management, and security operations. He's built and led teams across penetration testing, compliance advisory, and threat analysis, and hosts a top-25 cybercrime podcast. At Crush Security, Clayton runs operations, service delivery, and the partner ecosystem, ensuring every engagement delivers consistent, high-quality results.
UC Irvine, Paul Merage School of Business
Josh Johnson
Chief Technology Officer
Co-Founder
Josh Johnson is a hands-on engineering leader with 20 years of experience across cybersecurity architecture, digital forensics, incident response, and cloud infrastructure. He's served as a Field CISO and Senior Solution Architect. At Crush Security, Josh designs and builds the entire platform end to end, from the Cassandra AI engine and vendor intelligence pipeline to compliance tooling, threat intelligence infrastructure, and cloud architecture.