Penetration testing
- Manual application, network, cloud and IoT testing
- Web, mobile and API assessments
- Third-party pentest and bug bounty program management
About
Security testing and program building since 2011
Caesium55, LLC is an application security and penetration testing firm based in Marietta, Georgia. We find what attackers would find, then help your team build the program that keeps it from coming back.
Founder & lead assessor
Damien Suggs
- CISSP
- SANS GPEN
- Secure AI Systems (TryHackMe)
Damien has spent more than 23 years in application security, from hands-on penetration testing and ethical hacking to designing and running full-scale product security programs. He founded Caesium55 in 2011 and leads every engagement.
He has built first-of-their-kind product security programs for organizations in fintech and cryptocurrency, Web3, healthcare and retail, including one that secured more than 750 web applications while meeting PCI and FISMA requirements in AWS. He has led security work across AWS, Azure and Google Cloud, and has taught Certified Ethical Hacker courses.
Today he is extending that practice to AI and LLM systems: reviewing third-party models before they reach production, shaping how data science teams adopt AI tools safely, and threat modeling AI-integrated products.
Experience
What Damien brings to every engagement
Security programs
- Roadmaps built on OWASP SAMM
- Security champion program design
- SAST, DAST and SCA programs with meaningful metrics
Compliance
- PCI DSS, HIPAA, SOX, SOC and FISMA
- Audit-ready reporting and evidence
- Vendor assessment programs
AI & LLM security
- Third-party model review before production use
- AI threat modeling using STRIDE and OWASP
- Governance for how teams adopt AI tools
Community
Active in the security community for nearly two decades
ISSA Metro Atlanta
- Member of the Information Systems Security Association since 2007
- More than 12 years on the Metro Atlanta chapter board, including ten years as chapter president
- Chapter named ISSA International Chapter of the Year in 2011 and 2012
- Recognized on the ISSA International Honor Roll for 2022
Speaking & memberships
- ISSA International Conference, 2016 and 2017
- SAP Sapphire, 2017 · HP Protect, 2016
- Kennesaw State University Information Security Program, 2018
- OWASP member since 2011
Why Caesium55
What sets our testing apart
We understand your environment first
Before a single test runs, we learn what systems you have and why. We examine all 65,536 TCP and UDP ports, not just the top 1,024, because one missed port can hide the real risk.
Every finding is proven by hand
We use best-of-breed commercial and open-source tools, but a tool’s output isn’t a finding. Each issue is researched and manually exploited, safely, so your report has no false positives.
We stay until it’s fixed
The job isn’t done when the report is delivered. We work with your team on remediation and retest the findings within 45 days to confirm the gaps are closed.
Let’s talk about your environment
Tell us what you need tested or built, and we’ll scope an engagement that fits.