Engineering philosophy
Prefer systems that teams can understand and operate. Make tradeoffs explicit, keep architecture proportionate to the problem, and treat clear documentation as part of the engineering work.
About
Experienced technical judgment, explained clearly.
The consultancy is built around direct access to senior technical work, careful review of evidence, and recommendations that account for business and engineering constraints.
Founder
Matt Riley
Founder and Principal Consultant
- Biography
- Matt Riley is the founder and principal consultant of OSCMP. His work has ranged from highly regulated healthcare software to internet filtering and antivirus products and FedRAMP-authorized systems.
- Experience summary
- 25 years of professional experience across software engineering and security-focused products and systems.
- Patents and published applications
-
Matt is a named inventor on eight granted U.S. patents and four additional published U.S. patent applications in endpoint and software security.
The portfolio is practical rather than theoretical: it addresses how software earns trust, how malicious or unwanted changes are blocked, how systems recover from malware, and how security controls remain useful in day-to-day operations. That same bias toward explicit trust decisions, observable behavior, and deployable controls informs OSCMP engagements.
Granted U.S. patents
- US 12,321,452 — Monitoring and validating file associations
- US 12,229,258 — System, method, and apparatus for smart whitelisting/blacklisting
- US 12,175,235 — Smart software update system
- US 12,013,932 — System, method, and apparatus for enhanced blacklisting
- US 11,636,219 — System, method, and apparatus for enhanced whitelisting
- US 11,507,675 — System, method, and apparatus for enhanced whitelisting
- US 11,275,828 — System, method, and apparatus for enhanced whitelisting
- US 11,227,034 — System, method, and apparatus for assisting with passwords
Additional published U.S. applications
- US 2024/0346131 A1 — System, method, and apparatus for whitelisting installations
- US 2024/0160735 A1 — Malware detection and registry repair scripting
- US 2021/0049268 A1 — System, method, and apparatus for blocking false alerts
- US 2019/0260740 A1 — System, method, and apparatus for data access security
Working principles
Practicality without shortcuts
Security philosophy
Start with credible threats and actual system behavior. Prioritize controls by consequence and feasibility, avoid fear-based claims, and leave teams with practical ways to reduce risk.
Availability
Where and how engagements are delivered
- Geographic and service area
- Based in Michigan, serving clients throughout the United States.
- Remote availability
- Remote engagements available nationwide.
Need an independent technical perspective?
Start with the system, risk, or decision that needs experienced attention.