Cybersecurity consulting · Security architecture · Cloud security · DevSecOps · Public ISMS · Open Source Transparency
📍 Gothenburg, Sweden 🇸🇪 — 30+ years in IT · CISSP · CISM · AWS Security & Solutions Architect (Professional)

Builder of ISMS-PUBLIC · Riksdagsmonitor · EU Parliament Monitor · European Parliament MCP Server · Citizen Intelligence Agency · CIA Compliance Manager · Black Trigram

• 💖 Sponsor Hack23 — Support Open Source Security
• 🎯 About Me
• 🏆 Professional Certifications
• 🔐 Commitment to Transparency and Security
• 🏢 Hack23 AB
• 🍎 Discordian Cybersecurity Insights
• 🚀 Open Source Projects
• 🌍 The Hack23 Ecosystem
• 🔑 Security Services
• 📚 Project Documentation Index
• 🛡️ Security Focus Areas (CIA Triad)
• 🌟 Press & Media
• 🎤 Technical Talks & Presentations
• 💼 About James Pether Sörling
• 🗺️ Hack23.com Site Map
• 📫 Connect & Sponsor

Hack23 AB is bootstrapped, vendor-independent, and gives away what most consultancies sell behind a paywall — a complete public ISMS aligned with ISO 27001:2022 / NIS2 / GDPR / EU CRA / NIST CSF 2.0 / CIS Controls v8.1, production-grade open-source platforms for parliamentary transparency, and a deep Discordian Cybersecurity blog demystifying real-world security practice.

Your sponsorship directly funds:

• 🛡️ Maintenance and continuous improvement of the public ISMS-PUBLIC — 40+ policies, free to fork for any organization
• 🗳️ Operating costs of the parliamentary transparency platforms: Riksdagsmonitor, EU Parliament Monitor, European Parliament MCP Server, Citizen Intelligence Agency
• 🔬 Independent security research — supply-chain hardening, SBOM tooling, AWS security analyzers (sonar-cloudformation-plugin), threat-model templates
• 📚 Free educational content — 30+ Discordian Cybersecurity blog posts, the CIA Triad FAQ, security assessment checklists
• 🏅 SLSA Level 3 supply-chain hardening of every Hack23 release — signed attestations, dependency review, OpenSSF Scorecard
• 🌍 14-language accessibility of public-interest political intelligence — democracy is for everyone, not only English speakers

Why sponsor? Most security knowledge sits behind NDAs and audit-firm paywalls. Hack23 publishes the actual policies, threat models, architectures, and source code we run — so anyone, anywhere, can learn from them, copy them, and improve them. Sponsorship is how the lights stay on without compromising independence or accepting hidden agendas.

🌟 Become a Hack23 sponsor → github.com/sponsors/Hack23

Strong advocate for transparency in organizations, secure software development practices, and innovative open-source solutions. Experienced security professional with over 30 years in information technology, specializing in security architecture, cloud security, DevSecOps, and compliance (ISO 27001, NIS2, GDPR, EU CRA, NIST CSF 2.0, CIS Controls v8.1).

Prior roles include:

• 🛡️ Application Security Officer — Stena
• 🛡️ Information Security Officer — Polestar
• 🏗️ Senior Security Architect — WirelessCar

Currently CEO/Founder of Hack23 AB — a Swedish (Gothenburg-based) cybersecurity consultancy delivering practical security architecture, AWS cloud security, secure-SDLC enablement, and ISO 27001 / NIS2 / GDPR / EU CRA compliance through a 100 %-public ISMS and live open-source reference implementations.

At Hack23 AB, we believe that true security comes through transparency and demonstrable practices. Our Information Security Management System (ISMS) is publicly available, showcasing our commitment to open security practices and serving as a live reference for any organization building its own.

📋 Public ISMS Repository Complete Information Security Management System — 40+ policies aligned with ISO 27001:2022, NIS2, GDPR, EU CRA, NIST CSF 2.0, and CIS Controls v8.1.

🔒 Information Security Policy Enterprise-grade security framework and governance — the canonical, machine-verifiable policy set.

Our approach to cybersecurity consulting is built on a foundation of transparent practices:

• 🔍 Open Documentation — Complete ISMS framework available for review
• 📋 Policy Transparency — Detailed security policies and procedures publicly accessible
• 🎯 Demonstrable Expertise — Our own security implementation serves as a live demonstration
• 🔄 Continuous Improvement — Public documentation enables community feedback and enhancement

Explore information security, ISMS policies, and cybersecurity best practices through the unique Discordian lens inspired by the Illuminatus! trilogy. "Think for yourself, question authority."

📖 Security Blog: 30+ Posts Everything You Know About Security Is a Lie — Nation-state capabilities, approved crypto paradox, and Chapel Perilous initiation. Complete ISMS coverage with radical transparency.

Featured Content:

• 🎭 Discordian Manifesto - Everything You Know About Security Is a Lie
• 📚 Complete ISMS Coverage - All 30 posts link directly to ISMS-PUBLIC repository
• 🍎 Illuminatus! Style - FNORD detection, Chapel Perilous references, 23 FNORD 5 signatures

All hail Eris! All hail Discordia! 🍎

A curated portfolio of Hack23 AB open-source projects — every one operated under the public ISMS, with OpenSSF Scorecard, SLSA Level 3 attestations, DeepWiki docs, and reproducible builds.

%%{init: {"theme":"base","themeVariables":{"primaryColor":"#0066CC","primaryTextColor":"#fff","primaryBorderColor":"#003366","lineColor":"#94A3B8","secondaryColor":"#003399","tertiaryColor":"#7B1FA2","background":"#0F172A"}}}%%
graph TB
    subgraph CONSULT["💼 Hack23 AB — Cybersecurity Consulting"]
        SVC["🔑 Services<br/>hack23.com/services.html<br/>Architecture · Cloud · DevSecOps · Compliance"]
        ISMS["🔓 Public ISMS<br/>github.com/Hack23/ISMS-PUBLIC<br/>38 policies · ISO 27001:2022 · NIST CSF 2.0"]
        BLOG["🍎 Discordian Blog<br/>hack23.com/blog.html<br/>30+ posts · 8 languages"]
    end

    subgraph SOURCES["📡 Primary Open Data"]
        EP["🇪🇺 European Parliament<br/>data.europarl.europa.eu"]
        RD["🇸🇪 Riksdagen<br/>data.riksdagen.se"]
        REG["🇸🇪 Regeringskansliet<br/>regeringen.se"]
    end

    subgraph MCP["🔌 MCP Servers (AI Bridges)"]
        EPMCP["🇪🇺 European-Parliament-MCP-Server<br/>npm: european-parliament-mcp-server<br/>62 tools · 9 resources · 7 prompts"]
    end

    subgraph CIVIC["🏛️ Civic-Tech Platforms (Apache 2.0)"]
        CIA["🕵️ Citizen Intelligence Agency<br/>github.com/Hack23/cia<br/>Java 26 · Spring · 110 DB views · 1971–2024"]
        RM["🗳️ Riksdagsmonitor<br/>riksdagsmonitor.com<br/>11 agentic workflows · 14 languages"]
        EUM["🇪🇺 EU Parliament Monitor<br/>euparliamentmonitor.com<br/>9 agentic workflows · 14 languages"]
    end

    subgraph PRODUCT["📋 Products & Platforms"]
        CCM["📋 CIA Compliance Manager<br/>ciacompliancemanager.com<br/>npm: cia-compliance-manager<br/>React 19 · TypeScript 6"]
        BT["🥋 Black Trigram<br/>blacktrigram.com<br/>npm: blacktrigram<br/>Three.js · React 19 · 70 vital points"]
        GAME["🎮 Game Template<br/>github.com/Hack23/game<br/>SLSA 3 secure-by-default starter"]
    end

    subgraph AUDIENCE["👥 Audience"]
        USERS["Citizens · Journalists · Researchers · NGOs · Security teams · AI assistants (Claude · Cursor · Copilot · VS Code)"]
    end

    EP --> EPMCP
    EPMCP --> EUM
    RD --> CIA
    REG --> CIA
    CIA -->|"15 subsystems · nightly sync"| RM
    EUM --> USERS
    RM --> USERS
    CIA --> USERS
    CCM --> USERS
    BT --> USERS
    EPMCP -.->|"AI assistants"| USERS
    SVC --> USERS
    ISMS --> CIVIC
    ISMS --> PRODUCT
    BLOG --> USERS

    style CONSULT fill:#003366,stroke:#0066CC,color:#fff
    style ISMS fill:#0066CC,stroke:#003366,color:#fff
    style EPMCP fill:#6366F1,stroke:#4F46E5,color:#fff
    style CIA fill:#006B3F,stroke:#003F25,color:#fff
    style RM fill:#00338D,stroke:#FECC00,color:#fff
    style EUM fill:#003399,stroke:#FFCC00,color:#fff
    style CCM fill:#0066CC,stroke:#003366,color:#fff
    style BT fill:#000000,stroke:#FFD700,color:#FFD700

Single mission, one ISMS, one license (Apache-2.0), one set of compliance frameworks — applied identically across consulting, civic-tech and commercial products.

Each project has its own ISMS-aligned SECURITY_ARCHITECTURE.md, THREAT_MODEL.md, OpenSSF Scorecard, OpenSSF Best Practices badge, SLSA 3 attestation and SonarCloud quality gate.

AI-driven monitoring of Sweden's Riksdag, Government and public agencies — 349 current MPs, 2,494 historical politicians (1971–2024), 3.5M+ votes, 109,000+ documents, 14 languages, every day.

🔗 Surfaces: Live · Political Intelligence Hub · AI Newsroom · Dashboard · Sitemap · Features · Docs

Brussels and Strasbourg made readable. AI-newsroom over the European Parliament's open data — 8 unified gh-aw workflows, 51 analytical artifacts per run, 14 languages, 1,700+ daily artifacts, full Admiralty / WEP / SAT / ACH tradecraft.

🔗 Surfaces: Live · Political Intelligence Hub · Sitemap · API Docs · Features · Docs

Canonical TypeScript Model Context Protocol server bridging the European Parliament Open Data Portal v2 to any MCP-aware AI client (Claude Desktop, VS Code, Cursor, GitHub Copilot). 62 tools, 9 resources, 7 prompts, full GDPR-by-design.

🔗 Surfaces: Repository · npm · API Docs · Features · Docs

Java/Spring/Vaadin OSINT platform monitoring Sweden's Riksdag, Government and Myndigheter since 2008. 110 database views, 50 risk-detection rules, 1971–2024 longitudinal coverage, 3.5M+ votes, 109K+ documents. The data backbone behind Riksdagsmonitor.

🔗 Surfaces: Repository · Architecture · Security Architecture · Threat Model · Features · Docs

React 19 / TypeScript 6 platform for CIA-triad assessment, multi-framework compliance, threat modeling and business-impact quantification. Available as a live web app and a tree-shakeable npm library with 10 subpath exports.

🔗 Surfaces: Live App · npm · API Docs · Features · Docs

Production-ready 3D precision combat simulator. Eight I Ching trigram stances · 70 vital points · 51 authentic Korean martial-arts techniques · 5 fighter archetypes · 60fps desktop / 55fps+ mobile. React 19 · Three.js · TypeScript 6 · Vite 8.

🔗 Surfaces: Play · API Docs · Security Architecture · Threat Model · Features · Docs

Reference implementation of a secure web-game project: React + TypeScript + Three.js + Vite, SLSA 3, full SBOM, automated security testing, ISMS-policy mapping ready to fork.

Battle-tested reference implementation: AWS Lambda in a private VPC with VPC endpoints, CloudFront, WAF, KMS encryption, CloudTrail and Security Hub integration.

Open-source SonarQube plugin that brings CloudFormation IaC scanning into existing SonarQube/SonarCloud quality gates.

A fully public, version-controlled, machine-verifiable Information Security Management System. 38 policies covering access control, cryptography, secure development, threat modeling, vulnerability management, AI governance, GDPR privacy, EU CRA, ISO 27001:2022, NIST CSF 2.0, CIS Controls v8.1.