History
As a branch of the Skills4Life LLC family business, Practive Security was initially conceived in 2021 from a heart of wanting to bring our decades of cybersecurity expertise to every person who is concerned about staying safe online. For many years, we heard personal stories from family and friends about harm they experienced from online threats, along with the expressed sentiment of, “if I only knew before hand.” To address that problem by proactively informing and empowering you “before hand,” we formally launched as a public business in 2025.
Read more about why we launched Practive in our Coming Fall of 2025 story.
Skills4Life exists to provide practical education and consulting services to individuals, families, and business for life skills we believe are essential to healthy living.
Why Choose Us?
There are many books, videos, influencers, advocates and resources that provide guidance about online security and digital health, so why do we think we are worthy of your attention?
First, consider the experience of those other sources. Many of the books, influencers, and advocates speaking about online safety and security do not have actual experience as cyber security practitioners. They haven't worked in the field they are speaking about. They approach this through the symptoms which align with their area of expertise. We on the other hand, have over 25 years of professional experience working at the very peak of the cyber security industry. We speak from practice. Our credential is our experience. We've done this for decades and offer what we know.
Consider also the worldview of the source. Many of the other voices out there speaking on these issues are not Christians, or are approaching this topic from a posture of moral relativism that will be acceptable to this culture at large. They write in general terms. We approach this from our Christian worldview; it is the basis by which we see the world, including technology and online threats, and it is what guides our solutions. We are tethered to Christianity as our moral and universal paradigm and will always hold to that. We have a firm moral foundation and all we produce comes from that.
Consider the focus of the source. Many approach this topic from one perspective and with a specific set of goals. They want to address the psychological impact of a technology or a specific platform, or they focus on the legal aspects of regulation, or of online and personal privacy, or predators and human trafficking etc. We see all of these threat as related - they share the same root of corruption, share the same means of engaging us, and are all accessed through the same tools and platforms we use. We want to help you protect all that you are from all the threats; defending your heart, mind, body, soul, and property.
Consider the goal. Again, many of the other voices out there are fighting a cause; mental health, human trafficking, privacy etc. Our goal is to help you defend what matters the most: yourself and those under your care. And we want to help you defend the totality of who you are - your heart, mind, body, soul, and yes your property too.
Finally, consider the methods. Many others focus on giving you quick lists of things to do with the promise that if you do them, you'll be safe - problem solved. Just use x tool and configure it in certain ways, and problem solved. That's not us. While we do provide those lists, we want to help you understand the nature of the threats, build effective strategies to counter them in your context and life, and to guide you to effective tools & practices to do so. We believe adding technology on top of technology or operating within the context of the given is not sufficient. We need to adopt a different mindset and approach to technology altogether, if we want to protect ourselves from the threats.
We hope to earn your trust. We hope we can be an effective and valued advisor to help you forge the best shield you possibly can.
Staff
Founder
Matt Johnston
Matt has spent 25 years practicing Cybersecurity through many roles and across a wide set of contexts, as an employee of the businesses listed below. Within that time, he has supported small organizations like regional banks, major enterprises, Cybersecurity industry leaders, up to global fortune 100 companies, and numerous US government agencies. All of these experiences brought unique opportunities and challenges, upon which Matt has built his knowledge and expertise.
Career Timeline
Matt’s professional career started in the year 2000 within the Defense Industrial Base (DIB) working for a US Defense Contractor that delivered the entire spectrum of cybersecurity services to organizations inside and outside of government. In this time he also supported the US Intelligence Community through his work in adversary research and information sharing. He specialized in nation state adversaries and developing effective defenses including countermeasures, threat detection analytics, and threat-focused operations programs.
While practicing security engineering, operations, incident response, and security architecture, Matt specialized in threat intelligence and the combining of people, process, and technology into the most effective ways to counter real-world threats. Data science was at the core of Matt’s work as he used analytics capabilities to analyze data, discover patterns, highlight indicators, and otherwise discern meaning from collected information. Matt’s entire career built upon this initial foundation.
The broad experience he gained early on led him to roles focused on research and capability & maturity consulting for CISOs and security leaders who needed guidance in how to build, sustain, and improve their information security programs. He also worked with product companies who were developing new solutions and needed guidance to steer them toward what was most effective technically, and usable operationally.
In 2013 he joined a major software company in the financial services sector where he was responsible for maturing their technical and operational cybersecurity capabilities overall. One of the highlights of this chapter of his experience was helping that organization truly understand their primary threat, and to organize their security program to focus on countering it.
In 2015, Palo Alto Networks hired their first CISO and set to the work of building a formal security program, of which Matt was recruited as a founding member within the core leadership team. While primarily responsible for building out the threat intelligence program for enterprise defense, Matt also served as a mentor to the Director of Security Operations, developing and guiding the strategy for the entire SOC program - people, process, technology, and facilities. His work in threat intelligence also provided strategic guidance and support to the Governance, Engineering, Security Education, Risk Management, and Product teams. Using research and data analytics, Matt focused on building operational capabilities that identified and elevated true threats that were otherwise hidden among the background noise of business operations.
In 2021, Matt was hired by Rubrik to help them as a tech startup build their information security program from the ground up. He was responsible for defining the mission while building and implementing the strategy for security operations which included threat research, threat detection, data analytics, investigations, and incident response. Matt focused his time at Rubrik on ensuring the security team had the proper foundation and trajectory toward building an optimized security practice for their context as a cloud-first organization.
Starting in 2022 at CrowdStrike, Matt was invited to lead cloud threat research and detection content development for a Cloud Security Posture Management (CSPM) product engineering team. In this role he managed a team of security researchers and engineers in the development of detection content that was focused on threat & risk management for cloud native services. Another data analytics heavy role in which he used big data platforms combined with risk management experiences, to focus on building relevant solutions for CSPM customers. This team was responsible for the end-to-end development of cloud risk management use cases, content, and code that was deployed to customers of CrowdStrike’s cloud security products.
During his tenure at CrowdStrike, Matt participated in multiple “next generation” data analytics projects which involved designing new architectures for handling data analysis at larger scales and among increasingly diverse data sets. In this time he was an active participant in examining the applicability of LLM and AI technology in various contexts.
Throughout his career, Matt was always bothered by two things: the cybersecurity industry had lost its mission as a fundamentally moral endeavor (a cause for good), and that people he knew kept encountering harm from the online world he was combatting professionally.
By founding Prative Security in 2025, Matt changed his focus from enterprise security toward helping individuals, families, small business owners, and our youth understand and counter their digital threats. His aim is to bring his decades of experience to everyone so that we are all empowered to defend ourselves against the vast array of threats that exist online.
Throughout these 25 years, Matt has worked as a Security Analyst and Incident Responder; a Security Engineer responsible for technology deployments, maintenance, and integrations; a Security Strategist responsible for the capabilities and maturity of cybersecurity programs at large enterprises; as an educator teaching staff about online threats; as an Operations Manager; has led Threat Intelligence practices that focus on researching and understanding the adversary; and as a Manager of a Security Product team; and always in applied data sciences through his heavy use of data analytics.
Through all this time, he has seen what works well in Cybersecurity because he has researched the problems, implemented the solutions, and managed the outcomes they produce.
You can review Matt’s professional profile and business experienced on LinkedID here.
Matt resides in San Diego County with his wife and their three daughters. They are a homeschool family and work diligently to bring all of life together. To this end, the entire family participates in Practive Security in various ways.