Greystone Lab is the workshop of Dave Dempster — penetration tester, IT director, and lifelong tinkerer. Thirty years of breaking systems on purpose so the bad guys can't do it by accident.
Free-building LEGO instead of following the instructions. Reading 2600 at the Wallingford library. Soldering RadioShack kits on the kitchen table. Same instinct, bigger toys.
Timex Sinclair 1000. 2KB of RAM and endless curiosity. Writing code before most kids could ride a bike.
RadioShack project books, a well-worn 2600 habit, and a home-built blue box. Lessons in how systems trust signals.
First IT job. Windows since 1.0, networking since before most offices had it.
Two decades of MSP work: senior engineer and pentester for businesses across Connecticut.
Founded Robige Network Security. Built it, marketed it, ran it, wore every hat.
Offensive Security Certified Professional. CEH and Security+ alongside it.
Running IT and security for a CLIA-certified clinical lab, where compliance is not optional.
The workshop gets a name. Consulting, research, and builds, all in one place.
A rolling log from the workbench: microcontrollers, radios, offensive tooling, and the occasional piece of e-waste brought back to life.
Authorized Wi-Fi Pineapple demos that clone a trusted network and spin up a captive portal right in front of staff. Seeing your own login land on the attacker's screen teaches more than any slide deck.
LilyGO T-Display-S3 showing live CPU, GPU, temps, and disk with sparklines. Fed over serial by a Python agent and packaged as an EXE.
M5Paper e-ink weather board: OpenWeatherMap forecasts, NTP time, an indoor SHT30 sensor, and Orbitron type.
HackRF One passed into Linux, a Quansheng UV-K5 reflashed with F4HWN firmware, and a Uniden scanner tuned to local traffic. If it radiates, I want to see it.
Pocket Wi-Fi SSID scanner, a DIY signal and waveform generator, and a T-Dongle-S3 that hosts its own SoftAP file server.
Local LLMs driving Kali over MCP-over-SSH against a Game of Active Directory range and Metasploitable targets. No cloud, no data leaving the house. Research into how far an AI co-pilot can go in an assessment and where a human has to stay in the loop.
Turning a 1st-gen Echo Show into an Alexa-free weather display. Bringing a PocketCHIP back from the dead on mirrored repos.
A Prusa MK4S for enclosures, mounts, and the occasional trophy. CNC, welding, and tool-and-die skills fill in when plastic isn't enough.
Real applications built with AI as a pair programmer, from an IT management console to a hospital-staffing mobile app.
Small and mid-sized businesses get the same rigor I apply to a regulated clinical lab, delivered by the person who does the work. No sales engineer, no hand-off.
External and internal network tests, Active Directory attack paths, web app and Wi-Fi assessments. OSCP methodology with a plain-English report your owner can act on.
→NIST 800-53 and SOC 2–aligned reviews that report the gaps honestly. Find out where you actually stand before an auditor or attacker does.
→Live demos instead of checkbox videos: evil-twin Wi-Fi, phishing walkthroughs, and USB drops. Staff remember what they watched happen.
→Firmware, radio, and embedded device reviews from someone who builds on the same chips. If it has an antenna or a UART, I can look at it.
→Part-time security leadership for teams that need a roadmap, policies, and someone to answer to the auditor, without a full-time CISO salary.
→Hackers don't read brochures. Type help and look around. There may be things in here that aren't on the menu.
Plumber. Electrician. Machinist. Welder. Engine builder. Hacker. Turns out it's all the same skill: figuring out how things really work.
Pentest, assessment, a training session that people actually talk about afterward, or just a weird device you want taken apart. Send a note.
→ hello@greystonelab.com