About
A rogue binary is an unauthorized executable running where it should not be.
We are not the rogue process. We are what finds it.
What we do
Binary Rogue is a specialist assessment practice. We find unauthorized and untested AI inside a business and produce the documentation needed to prove it is under control — for an insurance underwriter, for a customer's procurement team, or for a board that has started asking.
The work is narrow on purpose. We are not an AI implementation consultancy, not a certification body, not a law firm, and not a software product with a dashboard you have to learn. We assess, we test, we document, and we tell you what to fix in what order.
Who does the work
Binary Rogue is run by Steve Milkiewicz. The practice comes out of direct operational experience inside the managed service provider channel — the platforms MSPs actually run on, and the integration and automation layer underneath them. That background is why the white-label channel exists here from day one rather than as an afterthought, and it is why the discovery methodology is built around signals that a real administrator can produce, rather than a product you would have to buy first.
When you engage Binary Rogue, the person who scopes the work is the person who does the work and the person who presents the findings. For an engagement of this size, that is a feature.
The name
Rogue binary is a term of art in information security: an executable running somewhere it was never authorized to run. The name inverts it.
There is a second reading we like. A binary system is gravitationally bound — two bodies holding each other in a fixed relationship. A rogue body is bound to nothing at all. Disciplined and unbound at once, which is roughly the job description.
The category is full of shields, padlocks, and blue gradients. We went a different way, and then made sure the work was conservative enough to earn it.
Principles
- Always the hunter, never the threat. Competence first, personality second.
- Fixed price, stated exclusions. You should know exactly what you are buying before you sign.
- Evidence over adjectives. Every finding carries the record that produced it.
- Say what was not tested. Stated limits are what make the rest credible.
- Read-only, least privilege, time-boxed. We never hold access we do not need.
Boundaries
Where we stop.
Being clear about this is not modesty. It is the reason a report from us is worth forwarding to a third party.
We do not give legal advice
We flag regulatory exposure and recommend counsel where it matters. We do not issue compliance opinions, and no report from us should ever be read as one.
We do not certify
There is no Binary Rogue seal. If your customer is demanding ISO 42001, that is a six to twelve month engagement with an accredited body and we will refer you to someone who does it properly.
We do not claim completeness
Every assessment is point-in-time and bounded by scope. The scope and its limits are stated in the report, in plain language, in a section your underwriter can read.
Start with the free self-check.
Three minutes, no email required to see the result, and an honest read on whether you need an engagement at all.