SpookyGoodServices, 2020–2024
What SpookyGood offered
A record of the work SpookyGood did while it operated. SpookyGood no longer takes engagements; current security work is handled by GhostKey Development.
Offensive security
Penetration tests
Scoped tests of networks and applications, run under a signed pen-testing agreement that set out the rules of engagement before any testing began.
Red-team engagements
Longer, goal-based exercises measuring how well an organization detected and responded to a realistic intrusion, not just how many vulnerabilities it had.
Custom tooling and OS builds
Purpose-built tools and hardened operating-system images for clients whose work required more than off-the-shelf software.
Security consulting
Practical guidance on closing gaps before an incident: account security, encryption, backups and the human side of security.
Investigations and forensics
Blockchain investigations
Following cryptocurrency through wallets, mixers, bridges and exchanges after thefts and scams, and producing documentation that victims and attorneys could act on.
Device and account forensics
Examining phones, computers and online accounts, preserving evidence properly and explaining the findings in plain language.
Cyber investigations
Working out how an incident happened, what was taken, and how to stop it happening again.
Incident recovery
When an attack had already happened, getting the client back on their feet and changing the practices that let it happen.
How engagements worked
Every engagement started with a written agreement. NDAs were available on request and could be signed with a PGP key. Files, messages and calls were encrypted, and clients could pay by card, check, bank transfer or cryptocurrency. Clients were given security advice throughout an engagement at no extra charge.
SpookyGood, LLC wound down in December 2024 and no longer takes engagements. Its founder, Kyeson Blake Utley, now runs GhostKey Development. For new work, use GhostKey's contact page.