About Luta Security

Luta Security implements a holistic approach to advance the security maturity of governments and organizations around the world. We identify and help address the gaps in organizations' people, process, and technology to mature their vulnerability management and improve the ROI for their security investments. We understand that there is not a one-size-fits-all approach to security. Every organization needs to assess its process maturity and operational capacity to determine what actions are needed to enhance its security, including which strategies and solutions make sense today and in the future.

Luta Security advises organizations across all phases of vulnerability coordination. Whether your organization is just getting started, or if you have already launched a vulnerability disclosure or bug bounty program, we can help your organization achieve its security goals, including complying with ISO 29147, 30111, and 27304.

Current and former clients include large and complex organizations such as the U.S. Department of Defense (DOD), the UK National Cyber Security Centre (NCSC), Facebook, and Zoom to name a few.


With over 40 years of combined professional cybersecurity, technology, and government expertise, the Luta Security team is ready to guide your organization toward a more secure future. Luta Security’s services are backed by a highly seasoned team led by Luta Security CEO and Founder, Katie Moussouris. As a computer hacker with more than 20 years of professional cybersecurity experience, Katie has a unique and unparalleled perspective on security research, vulnerability disclosure, and bug bounties. She serves as a security advisor for several governments and large organizations around the world, and she is the co-author and co-editor of ISO 29147, 30111, and 27304.

Core Values

We are guided by our core values of respect, pay equity, and accountability.

Identifying Gaps | Addressing Weaknesses | Advancing Security Maturity