Skip to Ask Spencer

For IT admins, IT/security leaders & pentesters

Security questions.
Practical next steps.

Get a second opinion on hardening, remediation priorities, or your next internal pentest. I’ll help you work through the tradeoffs and choose a practical next step.

Spencer Alessi presenting an Active Directory security workshop
Spencer Alessi
Spencer AlessiMicrosoft MVP · Former sysadmin, now pentester
Active Directory SecurityWindows SecurityInternal PentestingAssume Breach
Years in IT & security
15+
Penetration tests completed
150+
Hours of internal pentesting
in 2025 alone
1,000

What security question can I help you with?

Ask me one focused question. Get a free written answer with practical next steps.

Written answer: free · No card needed
Personal reply from Spencer by email
I never sell your information or share it with other marketers. Newsletter signup is optional. How I use your information.
Recorded video answer

Get a recorded answer

Get a longer, more detailed answer in a recorded video. I’ll walk through my reasoning, explain the tradeoffs, and outline practical next steps.

Free No card needed
I’ll email you a link to your recorded answer.

From the security community

What others have shared.

Feedback and shout-outs on my tools, talks, and security content. Select an image to view it larger.

Matt PogueLinkedIn recommendation
Benjamin ZulligerActive Directory security review
Chris Eller, MSClear communication
Conference shout-outOffensive AI Con
Security community recognitionX shout-out
YouTube feedbackPractical security education
Mike HornsbyPentesting insights
Harrison.WellsGuidance put into practice

Your question is submitted

Want more practical security insights?

Get Ethical Threat Insights by email for practical ideas on Active Directory, Windows security, and internal pentesting.

Subscribe

Free. Beehiiv will send a confirmation email to finish signup. Unsubscribe any time.

Newsletter signup is optional. Your question will be answered either way. Privacy details.