CEO/Founder Hack23 | Security & Open Source Expert | Cloud Security Specialist | Information Security Professional
Strong advocate for transparency in organizations, secure software development practices, and innovative open source solutions. Experienced security professional with over 30 years in information technology, specializing in security architecture, cloud security, and compliance. Prior roles including Application Security Officer at Stena, Information Security Officer at Polestar and Senior Security Architect at WirelessCar.
At Hack23 AB, we believe that true security comes through transparency and demonstrable practices. Our Information Security Management System (ISMS) is publicly available, showcasing our commitment to open security practices.
Our approach to cybersecurity consulting is built on a foundation of transparent practices:
- ๐ Open Documentation: Complete ISMS framework available for review
- ๐ Policy Transparency: Detailed security policies and procedures publicly accessible
- ๐ฏ Demonstrable Expertise: Our own security implementation serves as a live demonstration
- ๐ Continuous Improvement: Public documentation enables community feedback and enhancement
"Our commitment to transparency extends to our security practices - demonstrating that true security comes from robust processes, continuous improvement, and a culture where security considerations are integrated from the start."
โ James Pether Sรถrling, CEO/Founder
Swedish innovation hub specializing in creating immersive and precise game experiences alongside expert cybersecurity consulting and solutions.
At Hack23 AB, we believe that true security comes through transparency and demonstrable practices. Our Information Security Management System (ISMS) is publicly available, showcasing our commitment to security excellence and organizational transparency.
Our approach to cybersecurity consulting is built on a foundation of transparent practices:
- ๐ Open Documentation: Complete ISMS framework available for review
- ๐ Policy Transparency: Detailed security policies and procedures publicly accessible
- ๐ฏ Demonstrable Expertise: Our own security implementation serves as a live demonstration
- ๐ Continuous Improvement: Public documentation enables community feedback and enhancement
"Our commitment to transparency extends to our security practices - demonstrating that true security comes from robust processes, continuous improvement, and a culture where security considerations are integrated into every business decision."
โ James Pether Sรถrling, CEO/Founder
Explore information security, ISMS policies, and cybersecurity best practices through the unique Discordian lens inspired by the Illuminatus! trilogy. "Think for yourself, question authority."
Featured Content:
- ๐ญ Discordian Manifesto - Everything You Know About Security Is a Lie
- ๐ Complete ISMS Coverage - All 30 posts link directly to ISMS-PUBLIC repository
- ๐ Illuminatus! Style - FNORD detection, Chapel Perilous references, 23 FNORD 5 signatures
All hail Eris! All hail Discordia! ๐
|
Swedish Parliament Intelligence Platform monitoring political activity in Sweden's Riksdag with systematic transparency through real-time analysis and 50+ years of historical data (1971-2024). 
|
|
European Parliament Intelligence Platform โ an automated multi-language news platform that monitors EU Parliament activities with 14-language support, covering plenary sessions, committee reports, propositions, and breaking news. 
|
|
Model Context Protocol Server for European Parliament Open Data โ providing AI assistants with structured access to MEPs, plenary sessions, committees, legislative documents, and parliamentary questions through a secure, type-safe TypeScript implementation.
|
|
Political transparency platform monitoring Swedish political activity with data-driven insights, analytics, dashboard visualizations, and accountability metrics.
|
|
Realistic 2D precision combat simulator inspired by traditional Korean martial arts, focusing on precise anatomical targeting, authentic combat techniques, and detailed physics-based interactions. 
|
|
Security assessment platform for the CIA triad (Confidentiality, Integrity, Availability) with business impact analysis and compliance mapping to regulatory frameworks like NIST, ISO, GDPR, HIPAA, and SOC2.
|
|
Secure game development template with React, TypeScript, Three.js, and Vite - built with security-first principles, comprehensive SBOM generation, and automated security testing aligned with Hack23 AB's ISMS. 
|
|
Enterprise-grade multi-region active/active architecture with near-zero recovery time, comprehensive DNS failover, and AWS Resilience Hub policy compliance for mission-critical applications. 
|
|
SonarQube plugin for analyzing AWS CloudFormation templates with security best practices based on NIST, CWE, and ISO standards. |
Professional cybersecurity consulting services delivered remotely or in-person in Gothenburg. Drawing from over three decades of experience in software development and security architecture, we deliver practical security solutions that integrate seamlessly into your development processes without hindering innovation.
| ๐ Availability | Remote or in-person (Gothenburg) |
| ๐ฐ Pricing | Contact for pricing |
| ๐ข Company | Hack23 AB (Org.nr 5595347807) |
| ๐ง Contact |
| Area | Services | Ideal for |
|---|---|---|
| ๐๏ธ Security Architecture & Strategy |
Enterprise Security Architecture: Design and implementation of comprehensive security frameworks Risk Assessment & Management: Systematic identification and mitigation of security risks Security Strategy Development: Alignment of security initiatives with business objectives Governance Framework Design: Policy development and security awareness programs |
Organizations needing strategic security leadership and architectural guidance |
| โ๏ธ Cloud Security & DevSecOps |
Secure Cloud Solutions: AWS security assessment and architecture (Advanced level) DevSecOps Integration: Security seamlessly integrated into agile development processes Infrastructure as Code Security: Secure CloudFormation, Terraform implementations Container & Serverless Security: Modern application security best practices |
Development teams transitioning to cloud-native architectures with security focus |
| ๐ง Secure Development & Code Quality |
Secure SDLC Implementation: Building security into development lifecycles CI/CD Security Integration: Automated security testing and validation Code Quality & Security Analysis: Static analysis, vulnerability scanning Supply Chain Security: SLSA Level 3 compliance, SBOM implementation |
Development teams seeking to embed security without slowing innovation |
| Category | Services | Value |
|---|---|---|
| ๐ Compliance & Regulatory |
Regulatory Compliance: GDPR, NIS2, ISO 27001 implementation ISMS Design & Implementation: Information Security Management Systems AI Governance: Emerging AI risk management frameworks Audit Preparation: Documentation and evidence preparation |
Navigate complex regulatory landscapes with confidence |
| ๐ Open Source Security |
Open Source Program Office: OSPO establishment and management Vulnerability Management: Open source risk assessment and remediation Security Tool Development: Custom security solutions and automation Community Engagement: Open source security best practices |
Leverage open source securely while contributing to security transparency |
| ๐ Security Culture & Training |
Security Awareness Programs: Building organization-wide security culture Developer Security Training: Secure coding practices and methodologies Leadership Security Briefings: Executive-level security understanding Incident Response Training: Preparedness and response capability building |
Transform security from barrier to enabler through education and culture |
Three decades of hands-on experience in software development and security architecture means we understand the real challenges development teams face. We don't just point out problemsโwe provide practical, implementable solutions that enhance security without slowing down innovation.
Our approach: Security should be seamlessly integrated into your existing processes, not bolted on afterward. We help organizations build a culture of security awareness where protection becomes a natural part of how teams work, not an obstacle to overcome.
Passionate about transparency: As advocates for open source security, we believe in sharing knowledge and building community. Our solutions are designed to be understandable, maintainable, and aligned with industry best practices.
mindmap
root((๐ CIA Triad<br>Security Focus))
๐ Confidentiality
๐ท๏ธ Data Classification
๐ Public
๐ก๏ธ Restricted
๐๏ธ Confidential
๐ Secret
๐ช Access Control
๐ฅ RBAC Implementation
๐ MFA Integration
๐ Least Privilege
๐ Encryption
๐งฌ AES-256
๐งฟ Quantum-Safe Encryption
๐๏ธ KMS Integration
โ๏ธ Integrity
๐งช Data Validation
๐๏ธ Manual Checks
๐ค Automated Validation
๐ Blockchain Records
๐ Change Control
๐ Audit Trails
โป๏ธ Versioning
๐ก๏ธ Non-Repudiation
๐ Quality Assurance
๐งโ๐ป Code Analysis
๐งฉ Test Coverage
๐
SLSA Level 3
โฐ Availability
๐ก๏ธ Resilience Levels
๐พ Backup/Restore
๐ฅ Pilot Light
โจ๏ธ Warm Standby
๐ Multi-Site Active/Active
๐ Recovery Metrics
๐ RTO Targets
โณ RPO Objectives
๐ Uptime SLAs
๐ Monitoring
โค๏ธ Health Checks
๐จ Alerting
๐ฅ Chaos Testing
|
Featured article on innovative use of technology for political transparency Read Article |
Coverage on Citizen Intelligence Agency's monitoring capabilities Read Article |
Recognized in survey of parliamentary monitoring organizations View Report |
Eric Erfors credits Citizen Intelligence Agency for exposing politician voting attendance records Read Article |
mindmap
root((๐จโ๐ผ James Pether Sรถrling))
๐ Information & Security Leadership
๐จโ๐ผ CISO / ISO Roles
๐ก๏ธ Security Architecture
๐งฉ CIA Triad Implementation
๐ ๏ธ Policy Development & Governance
๐ Risk Management
๐ Audit & Compliance Oversight
๐ค AI Governance
๐ Open Source Program Office
๐๏ธ Frameworks & Compliance
๐ ISO 27001
๐ NIST 800-53
๐ VDA-ISA
๐ CIS Controls
๐ท๏ธ Data Protection / GDPR
๐ ISMS Implementation
๐งช Continuous Improvement
โ๏ธ Cloud & Platform Security
๐ Multi-Cloud (AWS / Azure)
๐๏ธ Enterprise & Reference Architectures
๐ Multi-Region Design
๐ Resilience & Failover
โป๏ธ High Availability Patterns
๐ Secure Cloud Services
Security Hub
GuardDuty
KMS
WAF
๐งฑ Network & VPC Security
๐ IAM / Least Privilege
๐ ๏ธ Infrastructure as Code
๐งพ CloudFormation
๐ ๏ธ Terraform
๐ GitOps / Pipelines
๐ Template Scanning
๐ฆ Supply Chain (SLSA Level 3)
๐ป Software Engineering
โ Java / Spring
โ๏ธ React / TypeScript
๐ PostgreSQL
๐ CI/CD Automation
๐งช Automated Testing
๐งต Secure SDLC (SSDLC)
๐ Code Quality (SonarQube)
๐ฌ Security Operations & Assurance
๐จ Incident Response
๐ต๏ธ Vulnerability Management
๐ Security Monitoring
๐งช Threat Modeling
๐ Logging & SIEM Use
๐ Open Source Leadership
๐ CIA Compliance Manager
๐๏ธ Citizen Intelligence Agency
๐ช๐บ EU Parliament Monitor
๐ European Parliament MCP Server
๐งฉ Sonar-CloudFormation-Plugin
๐ง cfn-nag Contributions
๐ค Community Engagement
๐ Code Review / Security Tooling
๐ Certifications & Recognition
๐ CISSP
๐ CISM
๐ฅ AWS Security Specialty
๐ฅ AWS Solutions Architect Professional
๐ก๏ธ SLSA Level 3 Attestations
๐ Strategic Impact
๐ Transparency Advocacy
๐งญ Security-by-Design Enablement
๐ง Knowledge Sharing / Speaking
๐ข Public Policy & Civic Tech
Experienced technology professional specializing in information security and delivery of secure cloud systems. Strong advocate for transparency in organizations and committed to ensuring robust security posture for modern applications through open source solutions.
Hack23.com is a static, multi-language HTML/CSS site deployed to AWS S3 + CloudFront.
For the authoritative, always up-to-date sitemap, use the live page:
- ๐ Live Sitemap: https://hack23.com/sitemap.html
The sections below mirror the structure of sitemap.html with direct, HTTPS links and icons aligned with the ISMS Style Guide.
Mission, values, company details, and CIA Triad foundations.
- ๐ Homepage: https://hack23.com/index.html
- ๐งญ Why Hack23?: https://hack23.com/why-hack23.html
- ๐ CIA Triad FAQ (Confidentiality, Integrity, Availability):
https://hack23.com/cia-triad-faq.html
Professional cybersecurity consulting focused on security architecture, cloud security, DevSecOps, and compliance โ with evidence-based practices and public ISMS.
- ๐ All Services (overview): https://hack23.com/services.html
- ๐๏ธ Security Architecture & Strategy:
https://hack23.com/services.html#security-architecture - โ๏ธ Cloud Security & DevSecOps:
https://hack23.com/services.html#cloud-security - ๐ Compliance & Regulatory:
https://hack23.com/services.html#compliance
- ๐๏ธ Security Architecture & Strategy:
- ๐งพ Security Assessment Checklist:
https://hack23.com/security-assessment-checklist.html
Open-source and reference projects used as live demonstrations of secure architecture, transparency, and practical security.
Realistic 2D precision combat simulator based on traditional Korean martial arts, used as a security-aware game and educational platform.
- ๐ฎ Overview: https://hack23.com/black-trigram.html
- โญ Features: https://hack23.com/black-trigram-features.html
- ๐ Documentation: https://hack23.com/black-trigram-docs.html
Open-source parliamentary monitoring and OSINT platform analyzing Swedish politics.
- ๐๏ธ Overview: https://hack23.com/cia-project.html
- โญ Features: https://hack23.com/cia-features.html
- ๐ Documentation: https://hack23.com/cia-docs.html
Browser-based compliance and CIA-triad assessment tool with no backend, focused on risk, impact, and framework mapping.
- ๐ Overview: https://hack23.com/compliance-manager.html
- โญ Features: https://hack23.com/cia-compliance-manager-features.html
- ๐ Documentation: https://hack23.com/cia-compliance-manager-docs.html
Swedish Parliament Intelligence Platform monitoring political activity in Sweden's Riksdag with systematic transparency through real-time analysis and 50+ years of historical data (1971-2024).
- ๐ Official Website: https://riksdagsmonitor.com
- ๐ Repository: https://github.com/Hack23/riksdagsmonitor
- โญ Features: https://hack23.com/riksdagsmonitor-features.html
- ๐ Documentation: https://hack23.com/riksdagsmonitor-docs.html
European Parliament Intelligence Platform with automated multi-language news generation covering plenary sessions, committee reports, propositions, and breaking news in 14 languages.
- ๐ Repository: https://github.com/Hack23/euparliamentmonitor
- โญ Features: https://hack23.com/euparliamentmonitor-features.html
- ๐ Documentation: https://hack23.com/euparliamentmonitor-docs.html
Model Context Protocol Server for European Parliament Open Data โ providing AI assistants with structured access to MEPs, plenary sessions, committees, legislative documents, and parliamentary questions.
- ๐ Repository: https://github.com/Hack23/European-Parliament-MCP-Server
- โญ Features: https://hack23.com/european-parliament-mcp-features.html
- ๐ Documentation: https://hack23.com/european-parliament-mcp-docs.html
- ๐ฆ npm: https://www.npmjs.com/package/european-parliament-mcp-server
Secure game development template with React, TypeScript, Three.js, and Vite - built with security-first principles, comprehensive SBOM generation, and automated security testing aligned with Hack23 AB's ISMS.
- ๐ Repository: https://github.com/Hack23/game
- ๐ Security Features: https://github.com/Hack23/game#-security-features
- ๐ ISMS Policy Mapping: https://github.com/Hack23/game/blob/master/docs/ISMS_POLICY_MAPPING.md
All blog content is centrally indexed here:
- ๐ All Blog Posts: https://hack23.com/blog.html
The blog blends ISMS-aligned policies with a Discordian, Illuminatus!-style narrative, making complex security concepts accessible while still professionally mapped to the public ISMS.
- ๐ญ Discordian Cybersecurity Manifesto:
https://hack23.com/discordian-cybersecurity.html
Representative themes (see blog.html for the full list and latest updates):
- ๐ง Everything You Know About Security Is a Lie
- ๐๏ธ The Security-Industrial Complex
- ๐ Question Authority: Crypto Approved By Spies
- ๐ท๏ธ Think For Yourself: Classification & Data Handling
Architecture, security, and financial/operational views of the Citizen Intelligence Agency platform:
- ๐๏ธ CIA Architecture: https://hack23.com/blog-cia-architecture.html
- ๐ก๏ธ CIA Security (Defense Through Transparency):
https://hack23.com/blog-cia-security.html - ๐ CIA Workflows (CI/CD & State Machines):
https://hack23.com/blog-cia-workflows.html - ๐ง CIA Mindmaps (Conceptual Sacred Geometry):
https://hack23.com/blog-cia-mindmaps.html - ๐ CIA OSINT Intelligence:
https://hack23.com/blog-cia-osint-intelligence.html - ๐ฎ CIA Future Security (Post-quantum & AI):
https://hack23.com/blog-cia-future-security.html - ๐ฐ CIA Financial Strategy โ โ$24.70/Day Democracyโ:
https://hack23.com/blog-cia-financial-strategy.html - ๐ CIA Business Case โ Global News:
https://hack23.com/blog-cia-business-case-global-news.html - ๐ฐ CIA Swedish Media Election 2026:
https://hack23.com/blog-cia-swedish-media-election-2026.html - ๐ข CIA Alternative Media Discordian 2026:
https://hack23.com/blog-cia-alternative-media-discordian-2026.html
Deep dives into the architecture, biomechanics, and future roadmap of Black Trigram:
- ๐๏ธ Architecture: https://hack23.com/blog-trigram-architecture.html
- ๐ฅ Combat & Vital Points:
https://hack23.com/blog-trigram-combat.html - ๐ฎ Future (VR & Immersive Training):
https://hack23.com/blog-trigram-future.html
Applies the CIA triad, STRIDE, and adaptive defense to real-world compliance tooling:
- ๐๏ธ Compliance Architecture:
https://hack23.com/blog-compliance-architecture.html - ๐ก๏ธ Compliance Security (STRIDE Through Five Dimensions):
https://hack23.com/blog-compliance-security.html - ๐ฎ Compliance Future (Context-Aware Defense):
https://hack23.com/blog-compliance-future.html
Evidence-based code reviews based on the actual cloned repositories, not just documentation:
- ๐ CIA Code Analysis:
https://hack23.com/blog-george-dorn-cia-code.html - ๐ Compliance Manager Code Analysis:
https://hack23.com/blog-george-dorn-compliance-code.html - ๐ Black Trigram Code Analysis:
https://hack23.com/blog-george-dorn-trigram-code.html
- ๐งฌ Automated Convergence (Security, Cloud, DevSecOps):
https://hack23.com/blog-automated-convergence.html - ๐ง Information Hoarding Destroys Data Integrity:
https://hack23.com/blog-information-hoarding.html - ๐ก๏ธ Public ISMS Benefits:
https://hack23.com/blog-public-isms-benefits.html - ๐ณ๏ธ Swedish Election 2026 โ Data-Driven Analysis:
https://hack23.com/swedish-election-2026.html
For the full and current list of posts, see:
๐ https://hack23.com/blog.html
The โDiscordianโ documents on hack23.com mirror and explain the formal ISMS-PUBLIC repository in a more narrative, accessible style.
Key entry points:
- ๐ Information Security Policy:
https://hack23.com/discordian-info-sec-policy.html - ๐ ISMS Transparency (What is Public vs. Redacted):
https://hack23.com/discordian-isms-transparency.html - ๐ ISMS Review & Continuous Improvement:
https://hack23.com/discordian-isms-review.html - ๐ Compliance Overview:
https://hack23.com/discordian-compliance.html - ๐งญ Compliance Frameworks (ISO 27001, NIST, CIS, etc.):
https://hack23.com/discordian-compliance-frameworks.html
Representative domains (see sitemap.html for the complete tree):
-
๐ Risk Management:
https://hack23.com/discordian-risk-assessment.html
https://hack23.com/discordian-risk-register.html
https://hack23.com/discordian-threat-modeling.html -
๐ Access & Identity:
https://hack23.com/discordian-access-control.html
https://hack23.com/discordian-remote-access.html
https://hack23.com/discordian-acceptable-use.html -
๐ท๏ธ Data Protection & Classification:
https://hack23.com/discordian-data-protection.html
https://hack23.com/discordian-data-classification.html
https://hack23.com/discordian-classification.html
https://hack23.com/discordian-privacy.html
https://hack23.com/discordian-crypto.html -
๐ Technical Security:
https://hack23.com/discordian-network-security.html
https://hack23.com/discordian-cloud-security.html
https://hack23.com/discordian-email-security.html
https://hack23.com/discordian-mobile-device.html
https://hack23.com/discordian-vuln-mgmt.html -
๐ ๏ธ Development & AI:
https://hack23.com/discordian-secure-dev.html
https://hack23.com/discordian-ai-policy.html
https://hack23.com/discordian-llm-security.html
https://hack23.com/discordian-open-source.html -
โ๏ธ Operations:
https://hack23.com/discordian-change-mgmt.html
https://hack23.com/discordian-asset-mgmt.html
https://hack23.com/discordian-monitoring-logging.html
https://hack23.com/discordian-backup-recovery.html -
๐ Business Continuity & Incident Response:
https://hack23.com/discordian-business-continuity.html
https://hack23.com/discordian-disaster-recovery.html
https://hack23.com/discordian-incident-response.html -
๐๏ธ Governance & Stakeholders:
https://hack23.com/discordian-security-strategy.html
https://hack23.com/discordian-security-metrics.html
https://hack23.com/discordian-security-training.html
https://hack23.com/discordian-stakeholders.html
https://hack23.com/discordian-business-value.html -
๐ค Third Party & Supply Chain:
https://hack23.com/discordian-third-party.html
https://hack23.com/discordian-supplier-reality.html -
๐ข Physical & Facilities:
https://hack23.com/discordian-physical-security.html -
โ๏ธ Regulatory (e.g., EU Cyber Resilience Act):
https://hack23.com/discordian-cra.html
https://hack23.com/discordian-cra-conformity.html
For the canonical policy set and machine-verifiable versions, see the public ISMS repository:
๐ https://github.com/Hack23/ISMS-PUBLIC
Hack23.com supports multiple languages, following the _sv / _ko conventions and language-specific sitemap pages.
- ๐บ๏ธ Sitemap (EN): https://hack23.com/sitemap.html
- ๐ Homepage (SV): https://hack23.com/index_sv.html
- ๐บ๏ธ Sitemap (SV): https://hack23.com/sitemap_sv.html
- ๐ Services (SV): https://hack23.com/services_sv.html
- ๐งญ Why Hack23 (SV): https://hack23.com/why-hack23_sv.html
- ๐ CIA Triad FAQ (SV): https://hack23.com/cia-triad-faq_sv.html
- ๐๏ธ CIA Features / Docs (SV):
https://hack23.com/cia-features_sv.html
https://hack23.com/cia-docs_sv.html - ๐ CIA Compliance Manager Features / Docs (SV):
https://hack23.com/cia-compliance-manager-features_sv.html
https://hack23.com/cia-compliance-manager-docs_sv.html - ๐ Selected Blog Translations (SV):
https://hack23.com/blog-public-isms-benefits_sv.html
https://hack23.com/blog-cia-swedish-media-election-2026_sv.html
https://hack23.com/swedish-election-2026_sv.html
- ๐ Homepage (KO): https://hack23.com/index_ko.html
- ๐บ๏ธ Sitemap (KO): https://hack23.com/sitemap_ko.html
- ๐ Services (KO): https://hack23.com/services_ko.html
- ๐ฎ Black Trigram Features / Docs (KO):
https://hack23.com/black-trigram-features_ko.html
https://hack23.com/black-trigram-docs_ko.html
- ๐บ๏ธ Sitemap (NL): https://hack23.com/sitemap_nl.html
- ๐บ๏ธ Sitemap (DE): https://hack23.com/sitemap_de.html
- ๐บ๏ธ Sitemap (FR): https://hack23.com/sitemap_fr.html
- ๐บ๏ธ Sitemap (JA): https://hack23.com/sitemap_ja.html
- ๐บ๏ธ Sitemap (ZH): https://hack23.com/sitemap_zh.html
Technical endpoints and repositories powering the public site:
- ๐บ๏ธ XML Sitemap (for crawlers): https://hack23.com/sitemap.xml
- ๐ค robots.txt: https://hack23.com/robots.txt
GitHub Repositories:
- ๐ Public ISMS: https://github.com/Hack23/ISMS-PUBLIC
- ๐ฅ๏ธ Homepage Source: https://github.com/Hack23/homepage
- ๐ช๐บ EU Parliament Monitor: https://github.com/Hack23/euparliamentmonitor
- ๐ European Parliament MCP Server: https://github.com/Hack23/European-Parliament-MCP-Server