Cybersecurity leadership, built on application security.
Founder, Rotteveel Consultancy. 30+ years across Fortify, Synopsys, HP, and Imperva. C|CISO · CISSP · CISM · CSSLP.
- Fractional CISO for organizations that need senior security leadership without a full-time hire.
- Security Program Development when there's no program yet, or the existing one is stuck.
- Application Security Assessments focused on actionable findings: what to fix, why, and in what order.
- Open-Source SCA Migration through the Vendor Unlock Program framework, in partnership with SCANOSS.
- Practice: rotteveel.ca
- Newsletter: Security Insights
- LinkedIn: linkedin.com/in/protteveel
- X: @appsecu
A handful of public AppSec utilities I've authored over the years, mostly Fortify and Prevoty tooling. Most of my current work lives in private client repositories, so what's visible here is the historical and educational tail.

