Prove it or don’t report it
Every finding is verified with reproducible evidence before it is recorded. We don’t hand over generic lists.
Evidence, scope and judgment. How we work, where we come from and who stands behind it.
Build, learn and share. These principles guide every assessment and every line of Kirux.
Every finding is verified with reproducible evidence before it is recorded. We don’t hand over generic lists.
We distinguish what was observed from what was confirmed and state the validation level of every finding.
Nothing starts without an explicit scope and permission. To begin: external, non-destructive, read-only recon.
AI expands what we can connect and build. Professional review remains part of the service.
NullGhost is a Mexican offensive and cloud security firm serving companies in Mexico and LATAM. We work with a defined scope, reproducible evidence and reports that serve both leadership and the people who implement the fixes.
Behind NullGhost is Ricardo Martinez, founder, with experience in cybersecurity. Kirux, our platform, grew out of that work.
A question that kept coming back: how do we turn what we learned into something others can use?
A brand of our own and a way of working: clear scope, evidence and reports people can understand.
A platform that connects security testing, operations and cloud posture to the findings that matter.
More capacity to connect tools and evidence. Judgment stays with the team.
Editorial story from the team. No figures or dates: concrete capabilities are agreed per project.
Offensive security, design and brand. Each partner signs their work and answers for it.

Combines offensive security and cloud architecture with applied research. Founded NullGhost and leads Kirux to turn technical findings into useful evidence and clear security decisions.
LinkedIn ↗
Turns complex ideas into clear, memorable visual identities. Leads design and visual communication at NullGhost, bringing experience in brand systems and content for Festival de las Ideas.
LinkedIn ↗
Leads marketing strategy and brand positioning at NullGhost. Connects brand, content, SEO and automation to build visibility, differentiate its offering and develop relationships that drive growth.
LinkedIn ↗Selected professional certifications and specialist training across security, cloud, applied AI, marketing and measurement. Credentials are held by individual team members; course completion badges are distinct from professional certifications.


A free initial external review. Summary in 24–48 hours.