See what is shifting in security and AI. Adjust in time.
Altervane gives growing and regulated companies the senior security and technology leadership they need: a clear roadmap, lower risk, and systems that stay up when something goes wrong.
The problems we are brought in to solve
“A partner, investor or acquirer sent a security questionnaire, and we are not sure how we would score.”
We run a diligence readiness review, close the gaps that cost deals, and prepare the evidence, before the questions arrive. If you are on the buying side, we assess the target and plan the integration.
“Our data travels to CROs, CDMOs, partners and vendors, and we cannot say where it ends up.”
We map how sensitive data moves, set the controls that follow it wherever it is shared, and hold third parties to account.
“We pay an MSP or MSSP every month, and we cannot tell whether we are getting what we pay for.”
Keep the partner you have. We review the contract, measure the service against your goals and get you the performance you are already paying for.
“Our people are already using AI tools, and we have no policy and no guardrails.”
We put in place practical AI governance and secure adoption, so teams keep their momentum and sensitive data stays protected.
“We have no security leader, but the board, auditors and customers keep asking hard questions.”
A vCISO gives you the oversight, a credible roadmap and a confident answer for every one of them.
“Our validated GxP systems are hard to patch, so they sit exposed, or we patch them and put our validated state at risk.”
We build risk-based change control and patching that keep GxP systems secure and validated, with the documentation an inspector expects to see.
“We suspect an insider issue, or something has happened, and we need to know exactly what, in a way Legal and HR can rely on.”
Discreet, defensible investigations and digital forensics, run hand in hand with Legal and HR, with evidence handled carefully from the first hour.
“If ransomware or an outage hit tomorrow, we do not know how long we would be down.”
We design for resilience, then test it, so critical services keep running through a fault, a disaster or an attack.
One senior partner across security and technology
Each engagement is scoped to a clear outcome, led by an experienced practitioner, and explained so that executives and engineers can both act on it.
vCISO advisory
Executive oversight and a roadmap from where you are to where you need to be, whether you are behind on compliance or aiming for lower risk.
Governance, risk and compliance
Risk assessments, policy, audit and inspection readiness, and framework alignment, including GxP, that stand up to regulators, auditors and customers.
AI governance and secure adoption
Policy, risk assessment, data protection and third-party AI review, so you can use AI with confidence.
MSP and MSSP optimization
Keep your current provider and get more from them: contract review, service improvement and oversight, aligned to your objectives.
Infrastructure and security architecture
Planning, buildout and independent review across infrastructure, cloud and identity, with findings ranked by real risk.
Data protection, wherever it travels
Controls that follow your data across systems, business partners and vendors, however it is shared.
Patching, vulnerability and validation
Systems kept current and free of known weaknesses, with proof the fixes worked. For GxP systems, security and validated state protected together.
Operational and cyber resilience
Services that stay available through a fault, a disaster or an attack, backed by recovery you have actually tested.
Investigations and digital forensics
Careful, defensible investigations of incidents and insider concerns, coordinated with Legal and HR so the facts hold up.
Due diligence and M&A integration
Security assessment before a deal, and a practical plan to bring two environments together safely after it closes.
GxP Patch & Validation Fast Lane
When a critical vulnerability is disclosed, a validated system cannot simply be patched, and it cannot be left exposed. The Fast Lane gives your team a pre-agreed, risk-based path to do both: patch quickly, stay validated, and keep the evidence an inspector expects.
Risk-based patching framework
Triage by real risk, not by fear.
Change-control and validation templates
Ready to use. Audit-ready.
Pilot on one system
Proof before you scale.
Altervane advises. Your quality unit keeps ownership of validation decisions and sign-off.
Clear steps, practical outcomes
Assess
Understand your systems, your people and your obligations, and find the risks that actually matter.
Prioritize
Turn findings into a plan the business can fund and the team can deliver, in a sensible order.
Support
Stay involved through delivery, so recommendations become working controls and not shelf documents.
Any organization where security, uptime and trust matter
Altervane works across industries. The fundamentals of protecting data, keeping systems available and meeting obligations are the same everywhere, and experience runs deepest in these sectors.
Life sciences
Biotech and pharma teams protecting research and clinical data, working with CROs and CDMOs, running GxP and validated systems, and preparing for inspections, partnerships and deals.
Financial services
Firms managing regulatory expectations, third-party risk and governance.
Aerospace and manufacturing
Engineering-driven organizations protecting intellectual property and keeping operations running across complex, global environments.
Technology and telecommunications
Product and platform companies that need security built in and customers who trust them.
IT services and managed providers
Organizations that depend on MSP, MSSP and channel partners, backed by experience across a wide range of technologies and provider ecosystems.
Every other industry
Healthcare, retail, energy, education, professional services and more. If security and technology are putting your goals at risk, we can help.
Saumil Joshi
Founder and Principal Advisor
- Experience
- 20+ years
- Certifications
- CISM, CISA
- Industries
- Across sectors
- Affiliation
- ISACA New England
I solve complex technology and security problems where deep technical expertise meets human empathy. The best security outcomes come from understanding the systems and the people who depend on them.
Most recently I was Director and Head of Cybersecurity at Mersana Therapeutics, where I built and ran the security program end to end. I worked across IT and closely with Legal, HR, other business units and the executive team. I have led security integration through multiple mergers and acquisitions and built security programs from scratch more than once.
Altervane exists to give leadership teams that experience, applied to the problem in front of them.
Not sure where to start? Describe the problem.
Share a few lines about your situation. You will hear back from Saumil directly, and he will tell you plainly whether Altervane is the right fit.
hello@altervane.com
Send an email
Greater Boston, Massachusetts. Serving clients nationwide.