About
DrewWeb3 security consultant. Founder of Zero Trust Security.
Drew is a Web3 security consultant who audits and hardens Discord and Telegram communities, reviews team operational security, and runs phishing programs for crypto projects. He built ZTS Guard, the 2FA-gating Discord bot now protecting 100+ servers.
- Years in security
- 13+
- Teams secured
- 240+
- Members protected
- 2M+
Background
How this started
Drew has worked in cybersecurity for more than 13 years: over a decade in traditional security, and the last 6+ years in Web3. Before founding Zero Trust Security, he was a security consultant for Fortune 500 companies.
He started Zero Trust Security because he kept seeing the same gap: most businesses stop at basic security and never build it into how they actually operate. A business is only as secure as the policies and knowledge at its core.
The earlier work was published under the name Drew Security. The testimonials on this site that say Drew Security are about the same person and the same practice, now called Zero Trust Security.
Today Zero Trust Security has worked with 240+ teams whose communities total more than 2M members, and ZTS Guard enforces 2FA on sensitive actions across those servers around the clock.
Track record
Public work you can check
Everything below links to a public source. If it isn't linked, it isn't listed.
- OngoingTeaching
Security 101 with Boring Security
Live classes on the security basics, the everyday habits that keep you safe, and how to spot the most common scams. The classes pair with the security tips Drew publishes every week.
- PodcastPress
The Grateful Show, Ep. 356
“Don’t Let Them Steal Your Crypto and NFTs.”
- SpacePress
Moby Media × Boring Security
An X Space on SIM swaps, 2FA, wallet setup, and avoiding fake airdrops.
- GrantPress
Gitcoin: Drew Security
The security education work, community-funded through Gitcoin grants.
- 2025Product
ZTS Guard launched
A Discord security bot that requires a fresh 2FA check before announcements, webhook creation, or elevated permissions. Now guarding 100+ communities.
Most incident work is confidential. Zero Trust Security has led response for compromised Discord servers and social accounts, from lockdown through recovery, including real-time incident response.
Launches and audits covered publicly
What clients say
In their words
“Working with Drew Security enabled our organization to enhance our Discord server security and implement multiple layers of protection. They provided documentation for internal security policies and best practices, leaving our organization with a reassuring sense of security preparedness.”
Oded OnnVP Marketing · StarkWare“Drew quickly helped Renzo set industry-leading security standards for Discord and helped protect our community and our brand.”
Lucas K.Founding Contributor · Renzo Protocol“Pixels highly recommends Drew Security Services. The level of professionalism and attention to detail was beyond impressive. Drew provided timely updates on the work he was doing throughout the process and has been extremely responsive to minor adjustments after the main project was complete.”
Pixels TeamPixels
More on the homepage, including public posts from the teams themselves.
Who we've worked with
23 named teams, 240+ overall
GamesGG · Arbitrum · BAYC · Figure · Ledger · HVMTL · Perle Labs · Beezie · Otherside · Plume · Pixels · Renzo · Gitcoin · Zksync · Starknet · Geez on Ape · Provenance · Revoke Cash · Vibes · Wolf Financial · Virtuals · Moonbirds · Reach Network
Logos and more on the homepage.
Writing
Public security writeups
24+ breakdowns of real scams and practical defenses, published on X since 2023. A few:
- Proper Wallet Setup (TAP)
- Real compromised team members sending malware
- Fake VCs (always target founders)
- Fake phishing emails (super important for interns)
- Address poisoning
Full archive: Security Tips & Common Scams
Scope
What we do
- Discord server security audits and hardened server builds
- Telegram group and channel audits
- Team operational security (OPSEC) reviews
- Brand protection: impersonation takedowns and lookalike monitoring
- Email phishing simulations and security training
- Ongoing security consulting on retainer
- ZTS Guard, our 2FA-gating Discord bot
If Zero Trust Security cannot do what you need, we have a wide network of trusted partners we are glad to introduce you to.
Contact
Reach Drew directly
Email is the fastest route for audit requests. Neither Drew nor anyone on the team will ever DM you first; if someone claiming to be Zero Trust Security messages you, it is a scam.