01
Pre-Compromise Focus
Detection after the fact is damage control. We instrument for visibility before incidents occur, because finding the adversary during their reconnaissance phase is the only win that matters.
Who We Are
Built for defenders who need true north
NorthQuinn is a cybersecurity product company building AVERY, behavioral threat intelligence that sits on top of the security stack a team already runs. We were founded on the reality that most organizations are compromised long before they know it.
Building AVERY
Incorporated · Delaware, 2026
Our Mission
The adversary is already inside most networks
Across Mandiant’s 2025 investigations, attackers went undetected for a median of 14 days, and a median hides the long tail of intrusions built to stay quiet far longer. By the time most organizations detect a breach, the attacker has mapped the environment, established persistence, and exfiltrated what they came for. NorthQuinn was built to break that pattern.
We are building the detection technology defenders have always needed but rarely had. Our flagship platform, AVERY, was designed from first principles around the assumption that advanced actors are already present, and that the goal is finding them before they find what they are looking for.
APT
Focused Threat Detection
13+
Years in Security & Infrastructure
Open
Source Defensive Stack
Zero
Vendor Lock-In
What We Stand For
The principles behind everything we build
02
Signal Over Volume
Alert fatigue kills SOC effectiveness. Every detection capability we build is engineered to surface actionable intelligence, not generate noise your team has to filter through at 2 AM.
03
Operational Transparency
We explain every detection, every tuning decision, and every recommendation in plain language. Your security program should not be a black box, even when the technology inside it is sophisticated.
04
Architecture That Holds
Security stacks built on shortcuts fail under pressure. We build for adversarial conditions from day one, every integration, every rule, every deployment decision made with real attack scenarios in mind.
05
Intelligence-Driven Defense
TTPs change. Threat actors adapt. A static ruleset is a liability. We operationalize live threat intelligence so your defenses evolve with the threat landscape, not six months behind it.
06
Evidence Before Claims
We publish our methods with their limits stated and correct the record openly when we get something wrong. What we say about AVERY is tied to what has been built and tested.
Leadership
The founder building AVERY
Founder & CEO
Angel Gonzalez Gines
Founded by Angel Gonzalez Gines, Founder & CEO.
Angel Gonzalez Gines is the founder and CEO of NorthQuinn and the architect of AVERY, behavioral threat intelligence designed to national security standards: built first for enterprise security teams, on the path to federal, intelligence-community, and defense organizations. He brings over thirteen years of experience across cybersecurity, IT infrastructure, and financial services, operating across enterprise and government environments in the United States before founding NorthQuinn.
His technical background spans the full defensive stack, from network monitoring and endpoint detection to threat intelligence integration and SOC architecture. AVERY, the behavioral threat intelligence platform he designed, reflects years of thinking about what pre-compromise visibility actually requires at the architecture level.
APT Detection
Network Forensics
SOC Architecture
Threat Intelligence
Behavioral Detection
Detection Engineering
Our Story
From observation to architecture
NorthQuinn did not start with a pitch deck. It started with a pattern recognition problem, watching organizations get compromised by actors who had been inside their networks for months, operating undetected because the detection capabilities those organizations had were never designed for the adversary they were actually facing.
AVERY started as an architecture document in 2024, built around a set of non-negotiables: pre-compromise focus, intelligence integration, and high-fidelity detection over alert volume. Everything since then has been building toward the platform those principles required.
2024
AVERY Architecture Document
The original architecture document establishes the philosophical and technical foundation: intelligence platform, pre-compromise focus, adversary-centric design. Non-negotiables locked before any stack decisions.
2025
Stack Selection and Platform Build
The defensive stack is finalized around modern open-source tooling. AVERY's detection architecture is locked and initial instrumentation begins. Components move from design to active build.
2026
NorthQuinn Inc. Incorporated
NorthQuinn is formally incorporated as a Delaware C Corporation, with the legal structure in place to serve government, IC, and enterprise customers. Public open-source tooling launches on GitHub.
Now
AVERY in Active Development
The detection engine and enrichment pipeline are in active development. NorthQuinn is recruiting five founding teammates to build AVERY and welcomes conversations with organizations interested in it.
Research
Published methods, working tools, stated limits
NorthQuinn publishes its threat research, the methods behind its detection approach, the open-source tools that implement parts of it, and the limits of each. Every paper says plainly where its method does not work, and corrections are published with a revision note.
- NQ-TIR-2026-001. Threat actors in the wild: a 10-day observational study of attacks against an internet-facing honeypot with an industrial control system persona. PDF
- NQ-DER-2026-001. Beacon detection without a SIEM: multi-signal correlation as a basis for low-false-positive command-and-control identification. PDF
- NQ-MTF-2026-001. Reconstructing telephony faults from the Android radio log under an adversarial input model. PDF
- Open-source tooling. Released with tests and documentation that states what each tool does not do.
Founding Team · 5 Seats
Five founding seats to build AVERY
NorthQuinn is an early-stage company with a working thesis, published research, and a platform in development. We are recruiting five founding teammates, each owning one part of the company from the beginning. Roles, commitment, and terms are worked out directly with the people who fit.
See the five seatsReady to find true north?
Whether you want an AVERY briefing, one of the five founding seats, or a research collaboration, it starts with a conversation.
Get In Touch