We exist to protect what adversaries most want to destroy.
Ghost Dragon Cyber designs and runs adversary-emulation tabletop exercises and delivers strategic advising for boards, government leaders, and operators who can’t afford to be wrong. We are not consultants. We are operators.
Why we exist. How we work. What we deliver.
Most security firms sell platforms, frameworks, and slide decks. We sell measurable outcomes against the actual adversary you face.
WHY
Adversaries — state, criminal, and ideological — are converging on the institutions, infrastructure, and people we depend on. Most defenders are running yesterday’s playbook against next year’s attacker. We exist to close that gap.
HOW
Operator-grade tabletop exercises and strategic advising — built on direct experience inside U.S. Marine Corps cyber operations, NATO logistics command, federal acquisitions, and 30+ years of PRC threat-actor research.
WHAT
Designed, scored, and delivered TTXs — plus board-level strategic advising, threat-emulation playbooks, and after-action reports executives can read in one sitting and act on by Monday.
Who you actually work with.
No junior analysts. No middle layer. The people who design your TTX are the people who run it and the people who write the report.
Principal One
USMC LtCol (Ret.) · Author · PRC Threat-Actor Researcher
- ▸30+ years researching PRC cyber, cognitive, and intelligent-warfare doctrine
- ▸Author, 21st Century Chinese Cyber Warfare (2012, 2nd ed. 2022) — the first English-language book on PLA cyber operations
- ▸Author, Operation Middle Kingdom, Chinese Cyber Crime, 21st Century Chinese Cognitive Warfare, Dragon’s Algorithm — 9 published works total
- ▸Former Marine Corps cyber operations officer; led 234-soldier HQ company in combat-equivalent posture
- ▸Designed and ran TTXs for Middle Eastern, South American, and Asian government clients
Principal Two
Federal Acquisitions Lead · NATO Reconciliation · Strategic Programs
- ▸Reconciled $11M in NATO funds; uncovered $2M in fraud
- ▸Stood up 140+ Air Force Senior Contracting Office positions
- ▸Led $450K of U.S. State Department program execution
- ▸Federal acquisitions, supply-chain risk, and program-management depth across joint and coalition environments
- ▸Translates security and intelligence requirements into procurable, executable government programs
What we do. Built to be measurable.
Every engagement produces written deliverables a board can read, scored against decision quality and time-to-decision — not against alert volume or framework checkboxes.
Tabletop Exercises (TTX)
Operator-grade adversary-emulation tabletops designed against your actual threat model — not a generic ransomware scenario. Cyber, physical, and cognitive injects, scored against measurable outcomes.
- +Custom scenario design against PRC, Russia, criminal, and insider adversaries
- +Cyber + physical + cognitive (synthetic media) injects
- +Scored on MTTD / MTTT / MTTDec, decision quality, and comms cadence
- +Board-level after-action report
- +Combined N=45 across 3 prior engagements (Middle East, South America, Asia)
Strategic Advising
Direct, periodic, board-level advisory engagements for CEOs, GCs, CISOs, and government leaders facing geopolitical, supply-chain, and intelligent-warfare-era exposure.
- +Diagnose · Design · Execute · Evaluate methodology
- +Geopolitical and adversary trend briefings
- +Supply-chain and federal-acquisitions risk advisory
- +Cognitive-warfare exposure assessment
- +Quarterly cadence; written outputs every engagement
Diagnose. Design. Execute. Evaluate.
DIAGNOSE
Threat-actor scoping, exposure mapping, and current-state security/operations baseline. Calibrated against your actual adversaries — not a generic framework.
DESIGN
Scenario design, inject library, role assignments, scoring rubric. Every element traceable to a measurable outcome you and your board care about.
EXECUTE
Live TTX run, facilitation, real-time injects, role-play of adversary teams. We run the exercise. Your team responds. We score.
EVALUATE
After-action report. Quantified gaps. Prioritized remediation. Board-ready briefing material. Optionally, a follow-on advisory engagement.
Anonymized for reasons that should be obvious.
If you need a reference, schedule a discovery call. We’ll connect you to the appropriate party where operationally permitted.
National-tier TTX program for a Middle Eastern government entity
Designed and ran adversary-emulation tabletops across multi-domain scenarios. Identified gaps in cross-ministry coordination and produced a re-baselined IR posture.
Strategic-program advisory and TTX for a South American government client
Cyber and cognitive-warfare exposure assessment combined with a live tabletop. Delivered prioritized recommendations to executive leadership.
PRC-adversary-emulation TTX for an Asian government partner
Scenario specifically built around PLA intelligent-warfare doctrine. Identified C2 and decision-quality gaps under cognitive load.
Three questions your board should be able to answer.
If any of the answers below produce silence in the room, you have a gap. We can help you close it before the adversary tests you.
Help us calibrate Ghost Dragon’s product mix.
A short research survey for senior security, risk, and government leaders. We are validating two services — adversary-emulation TTX and Strategic Advising — and your input directly shapes scope, format, and pricing. Identify yourself only on the last page, only if you want to.
Field-grade reading. No fluff.
Insights briefs adapted from open-source PRC doctrine and Ghost Dragon’s operator commentary. Gated for serious readers — short credentialing, then access. Open the Content Library →
PRC Intelligent Warfare: A Primer
From mechanized to informationized to intelligent — what the PLA is actually building, and why your TTXs are out of date.
AGI and the Future of Warfare
What changes when the adversary’s planner is not human. Five operational effects to plan for.
Human-Machine Integrated Combat
The fourth military revolution is already in the field. Most blue teams have not noticed.
PRC Cognitive Warfare: A Field Note
What it is, how to spot it, and why your TTX program needs an answer to it.
If you have to ask, you don’t have a need to know.
If you do have a need to know, the fastest path is a discovery call. We’ll qualify the engagement, scope it honestly, and tell you if we’re the right fit.
Direct contact preferred. We do not use a routing inbox. All inquiries are read and you will receive a response within one business day.
Take our short, anonymous validation survey. It helps us calibrate TTX and Strategic Advising offerings — no follow-up unless you opt in at the end.
Take the Survey →