Calibre Security Group is an independent security consultancy. We assess physical access control and cybersecurity for offices, data centers, cloud environments and critical infrastructure, and we write reports that the people fixing things can actually use.
The problems we look for tend to sit between teams. A badge format that can be copied. Someone who left the company but whose access was only removed from the identity provider, not the door. A contractor who signed in once and never signed out. A cage in a shared data center whose key three companies have. These rarely show up in a framework report, and nobody owns them until something goes missing.
On the physical side we assess credentials and access control, and test the physical controls in SOC 2, ISO 27001, PCI DSS, HIPAA and CMMC. On the cyber side we run gap assessments against standards like ISO 27001, NIST CSF and the Saudi NCA frameworks, and audit AWS, Azure and Oracle Cloud. When a finding needs new technology, we say which. We take no referral fee or commission on anything we recommend, and the person who scopes your work is the person who does it.
Calibre is founder-led, and the person you speak to on the scoping call is the person who walks your building and writes your report. Specialists are brought in by name for engagements that need them, and introduced before they attend.

Converged security specialist with global enterprise experience across physical and cyber domains. Guillem holds a Master's in Cybersecurity from New York University and previously held roles in Cybersecurity audit and Software Engineering at Goldman Sachs and Google respectively.