AI security consulting
AI security for leaders who have to answer for it.
Board advisory, secure SDLC, and incident response from a practitioner who has done the work. Based in Quebec, working in English and French.
- 15+ years architecting and building systems
- Experience in regulated environments
- Montreal area, on site or remote, EN / FR
AI security, from architecture to the boardroom
CODACON operates at the intersection of AI and security. We help organizations detect threats faster, ship secure software, and make informed decisions about AI risk — from the engineering team to the board.
What we do
Board advisory — AI risk and security posture for leadership. We translate technical risk into business language and help boards set policy that reflects reality, not vendor slide decks.
Secure architectures & AI-driven SDLC — We design and build secure systems for clients who ship software. That means threat modeling, secure-by-default cloud infrastructure on AWS, and an AI-augmented software development lifecycle that catches vulnerabilities before they reach production.
Incident response — AI-assisted detection, triage, and response. We integrate AI tooling into your IR workflow so your team catches threats earlier and resolves them faster. Not a managed SOC — we build the capability inside your organization.
Executive coaching — Private coaching for CTOs, VPs of Engineering and CISOs on leading secure software delivery in the age of AI. About the program.
Talent — Recruiting and vetting top practitioners in AI security. The market is thin and full of noise. We know who is real.
Not sure where to start? Begin with a four-week GenAI Security Readiness Assessment.
How an engagement runs
- Call. Thirty minutes. You describe the situation; we tell you honestly whether we can help.
- Scope. A written scope with outcomes, timeline and price. No packages, no retainers you did not ask for.
- Work. We work inside your team, with your tools, and leave capability behind.
- Handover, or continuity. Documentation, a briefing for your leadership, and a clear view of what comes next. Clients who want a standing line to us move to a monthly advisory retainer.
Why work with us
We are practitioners, not a slide deck consultancy. Our team has shipped production security systems, led incident response at scale, and built AI tooling that works. We are direct, we scope tightly, and we deliver.
Talk to us about your security posture, AI strategy, or hiring needs.
From the founder
I started CODACON after fifteen-plus years architecting and building systems, much of it in regulated environments. I watched security teams fall behind AI adoption inside their own companies, and I watched boards ask questions nobody in the room could answer. CODACON exists to close that gap, one organization at a time.
If you are building with AI and thinking about security, or thinking about AI and worried about security, we should talk.
David Côté, Founder
From the blog
-
What Should a Board Ask Before Approving an AI Coding Tool Rollout? — Seven questions directors should ask before approving an AI coding tool rollout: evidence of value, bounded access, accountability, and stop conditions.
-
Why We Started CODACON — AI is reshaping security — how organizations detect threats, build software, and manage risk. CODACON exists to close the gap between AI capability and security practice.