treyblalock.com

What It Is

Trey Blalock is not a traditional cybersecurity vendor or SaaS product, but a personal expert brand offering cybersecurity keynotes, board and executive briefings, technical deep dives, and workshops. Public materials emphasize his former CISO experience, including roles as CISO at Coinstar and Cognira, as well as experience in red teaming, blue teaming, penetration testing, forensics, and global security programs. The positioning focuses on emerging threats, ransomware resilience, and the weaponization of AI.

Core Capabilities

In terms of protection type, this is closer to “strategic consulting + security education + incident preparedness” than endpoint protection, email security, or a cloud security platform. Core topics include how attackers use AI, AI’s impact on supply chains, ransomware and extortion trends, industrialized threats, and board-level risk communication. The materials mention disclosure decision matrices, tabletop exercise scripts, and risk committee dashboard templates, which can be valuable for executive governance and incident response readiness.

Delivery formats include 45–60 minute keynotes, 30–90 minute executive briefings, 60–90 minute technical deep dives, half-day/full-day workshops, and a quarterly briefing series delivered 4 times per year. For management and alerting, it does not provide continuous monitoring, an alerting platform, or automated response capabilities. Integration capabilities are also not disclosed; the offering relies more on customized content delivery.

Pricing

Public pricing is relatively transparent but incomplete: Executive Briefing is USD 7,500, Technical Deep Dives are USD 7,500, and the Quarterly Briefing Series is USD 24,000/year. Keynotes, half-day workshops, and full-day workshops are listed as “Varies,” travel expenses are additional, and options for nonprofits/educational institutions are mentioned. Payment methods are not disclosed.

Pros and Cons

Its strengths are that the topics closely match current enterprise concerns, especially AI-accelerated cybercrime, ransomware, and supply chain attacks. The speaker’s background spans CISO roles, offensive and defensive teams, penetration testing, and board communication, making it suitable for translating complex threats into actionable language for senior leadership. The downside is that this is not a deployable security product and cannot replace EDR, SIEM, MDR, or backup and recovery systems. Public materials also lack information on post-session support, remote delivery, SLAs, and compliance certifications.

Best Fit and Access from China

It is best suited for medium to large enterprises, public-sector organizations, and conference organizers that need board risk briefings, industry threat updates, ransomware tabletop exercises, or cybersecurity conference keynotes. For access from China, the source text does not provide availability information, so it is considered unknown.