About ControlSolid
Practical cybersecurity expertise for growing and regulated organizations.
ControlSolid supports organizations with practical cybersecurity, payment-security, and digital-forensics consulting. The work is deliberately practical: scope precisely, assess honestly, fix what carries real exposure, and leave the organization with evidence it can produce on demand.
Three situations we help with
- A customer, regulator, or auditor is asking for security evidence.
- A growing product or cloud environment needs an independent technical review.
- Leadership needs a prioritized security plan and experienced guidance.
What ControlSolid delivers
- Readiness & complianceSOC 2, ISO 27001, HIPAA and NIST gap assessments.
- PCI & payment securityDSS, SSF, 3DS, PIN and P2PE readiness.
- App, API & cloud securityArchitecture review, threat modeling and secure SDLC.
- Penetration testingWeb application and API testing with actionable findings.
- AI securityLLM and AI feature review aligned to OWASP and NIST AI RMF.
- vCISO & customer assuranceProgram ownership, questionnaires and board-ready reporting.
How the work is done
Evidence over paperwork
Controls are designed to be operable and provable.
Prioritized by real risk
Findings are ranked by exposure and business impact.
Clear independence boundaries
Readiness and advisory only; audits and certifications are performed by independent bodies.
Kelvin O. Medina, Founder & Managing Principal
Before founding ControlSolid, Kelvin worked in application security at AWS and led principal-level payment-security consulting at Trustwave. His background spans cloud, application and payment security, threat modeling, penetration testing and secure SDLC design. His payment-security work also included forensic acquisition of payment-application evidence in support of PA-DSS engagements.
Education
- MS, Technical Management
- Johns Hopkins University
- BS, Computer Science
- University of Puerto Rico
Credentials
- CISSP · GCIH · CISA
- AWS Security and Architecture certifications
- Former Qualified Security Assessor (QSA)