Skip to content
Chris Davis
Menu
Fractional CISO & CTO · Toronto · Remote

Chris Davis

Fractional CISO & CTO. Hands-on AI SaaS builder.

I help founders and leadership teams at growing SaaS and technology-enabled businesses strengthen security, make better technology decisions, and turn AI ideas into working software. I combine executive judgment with hands-on engineering.

Schedule a meeting Explore PostForge
Toronto, ON · remote github.com/cdavis-code
Portrait of Chris Davis
Toronto, ON
Fractional CISO & CTO
25 yrs
Custody of one SaaS platform
15M+
ARR protected (USD)
0
Material security incidents
100+
Open-source GitHub stars
Services

Three ways I can help.

One person doing the work. Each starts with the business problem, not a fixed package.

Fractional CISO

You need credible security leadership and a practical plan, but not a full-time security executive.

Typical scope

  • Security posture and governance review
  • Risk prioritization and ownership
  • Practical security and AI-use policies
  • Vendor and customer security discussions
  • Cyber-insurance questionnaire preparation support
  • Preliminary SOC 2 planning

Example outputs

  • Prioritized risk register
  • Security roadmap
  • Policy and process recommendations
  • Evidence-status and gap summary
  • Management decision brief

Fractional CTO

You need experienced technology leadership to make better decisions and help your team deliver.

Typical scope

  • Architecture and roadmap review
  • Technical debt prioritization
  • Cloud and vendor decisions
  • Engineering delivery and release practices
  • Hiring, coaching, and team structure
  • Technical diligence
  • Hands-on architecture and code review

Example outputs

  • Technology assessment
  • Prioritized delivery roadmap
  • Architecture recommendations
  • Engineering improvement plan
  • Build-versus-buy decision brief

AI SaaS & Workflow Development

You have an AI product or workflow opportunity and need someone who can turn it into a working system.

Typical scope

  • Use-case discovery and feasibility
  • Product and workflow design
  • LLM-enabled application development
  • Source-grounded generation
  • Human review and approval steps
  • Quality checks and evaluation design
  • APIs, tools, and MCP integration where appropriate
  • MVP development and iteration

Example outputs

  • Feasibility brief
  • Working prototype or scoped MVP
  • Workflow and architecture documentation
  • Defined quality checks and acceptance criteria
  • Delivery and handover plan

Each engagement is scoped separately. Implementation is not included unless we agree on it. You keep management decisions and risk acceptance. Audits and legal advice are separate services, and no advisory engagement guarantees insurance, compliance, or incident outcomes.

PostForge · Founder & builder

From AI capability to a working SaaS product.

I founded and built PostForge to turn a fragmented research and publishing task into a repeatable, source-grounded workflow.

Problem

Experts need to communicate their perspective consistently without spending hours researching, drafting, and publishing.

Product

An integrated workflow that finds relevant material, reads sources, drafts in the user's voice, runs checks, supports review, and schedules LinkedIn publishing.

The workflow

  1. Find
  2. Read
  3. Draft
  4. Check
  5. Review
  6. Publish

Review is the default. Automated publishing is an explicit opt-in.

Engineering capabilities demonstrated

  • Multi-step AI workflow design
  • External source ingestion
  • Context and professional voice handling
  • Quality and duplicate checks
  • Human approval and configurable automation
  • LinkedIn publishing integration
  • Scoped, revocable MCP access

My role

Founder and builder: product design, workflow architecture, LLM integration, publishing integration, and ongoing development.

What's public

The live product and its documentation are the evidence. Customer counts, revenue, and accuracy metrics are not published.

Visit thepostforge.ai
How we work

A clear path from problem to handover.

  1. 01

    Understand the business

    Clarify the problem, constraints, stakeholders, and desired outcome.

  2. 02

    Define a practical scope

    Agree priorities, responsibilities, deliverables, and budget.

  3. 03

    Advise, build, or guide delivery

    Match hands-on involvement to the engagement.

  4. 04

    Review and hand over

    Document decisions, open risks, and next steps.

Typical engagement shapes

  • Focused assessment or advisory project
  • Ongoing fractional leadership
  • Defined AI prototype or SaaS build

Scope, responsibilities, deliverables, and budget are agreed before work starts.

Experience

Experience with a through-line.

Twenty-five years of engineering leadership and security governance at one SaaS company. Now I run a live AI product of my own. I stayed hands-on through all of it, and I still own the outcome.

Founder & Builder

PostForgeCurrent
Mar 2026 – Present
  • Designed and built a live AI-enabled SaaS product for source-grounded LinkedIn publishing.
  • Own product design, workflow architecture, LLM integration, publishing integrations, and ongoing development.

Functional CISO & Engineering Leader

Venngo
25 years · 2000–2026
  • Unbroken custody of the systems, codebase, and PII behind a SaaS platform serving enterprise clients responsible for ~$15M ARR.
  • Owner of SOC 2 Type 2, GDPR posture, AI governance, the internal risk committee, and customer security diligence.
  • Hired, trained, and retained the engineering function over a quarter century without a single material incident.

Technical proof

Still hands-on with architecture, code review, development, automation, and open-source libraries.

  • Java
  • PHP
  • Python
  • Dart / Flutter
  • TypeScript
  • AWS
  • CI/CD
  • Code review
  • Automation
  • Open-source libraries

Also experienced with SR&ED and NRC/IRAP funding initiatives.

Writing

Notes from the work.

Security, AI adoption, engineering leadership, and what I learn building PostForge.

Medium@unnghabunga

Building an AI Copilot for Cloud Security Operations

Designing a security operations agent that triages alerts, investigates incidents, and correlates compliance controls, but never acts without human approval. The "propose, don't execute" pattern for AI agents under regulatory constraint.

Read article
LinkedIn

AI was supposed to kill engineering jobs

New hiring data from SignalFire shows engineering roles capturing a larger share of new tech hires, even as broader tech headcount contracts under AI pressure. The roles getting cut first: support, marketing ops, and content production. The roles growing: the engineers who build and maintain the systems AI runs on.

View post
LinkedIn

By-design flaw in MCP could enable widespread tool poisoning

The Model Context Protocol is becoming the standard for linking AI assistants to databases, APIs, and file systems. Security researchers uncovered a fundamental flaw in its core communication pathway allowing command injection without any validation warnings, resulting in full system control.

View post
LinkedIn

The App Store is booming again — and AI may be the catalyst

Worldwide app launches jumped 60% year-over-year in Q1 2026, with iOS releases up 80%. April saw an even bigger surge: 104% growth across both stores. AI-assisted vibe coding tools like Claude Code and Replit are lowering technical barriers and enabling a new wave of creators.

View post
ThePostForge

How to Turn Client Experience Into LinkedIn Posts Without Breaking Confidentiality

The SHARE review for client-informed posts, why removing the name is not anonymization, and four safer ways to turn experience into insight.

Read guide
ThePostForge

Why Most LinkedIn Thought Leadership Sounds the Same, and What Independent Consultants Should Do Instead

Why polished posts still read as generic, five signs a post could have been written by anyone, and how to make the judgment before drafting.

Read guide
ThePostForge

From Topic to Draft: How PostForge Turns Industry News Into LinkedIn Posts in Your Voice

The work behind the routine: finding a credible source, reading it properly, drafting in your voice, and keeping the judgment that makes a post yours.

Read guide
ThePostForge

A 30-Minute Weekly LinkedIn System for Busy Expert Advisors

A repeatable weekly workflow: three themes, one credible source each, two posts, and five minutes of comments.

Read guide
Open source

Technical proof.

Dart libraries and developer tools that demonstrate the work above.

All repositories
easy_onvif_workspace

Dart implementation of the ONVIF protocol for IP cameras and NVRs. Demonstrates protocol-level integration and library design.

Dart 48
google_vision_workspace

Google Vision in Dart: image labeling, face/logo/landmark detection, OCR, and safe-search classification. Demonstrates wrapping a cloud API into a usable developer library.

Dart 22
obs_websocket_workspace

Dart connector for OBS Studio's obs-websocket plugin. Demonstrates wrapping a live external API into a usable developer library.

Dart 22
Hackathons

Building under pressure.

DevpostGlobal AI Hackathon Series — Qwen Cloud

Alibaba Blueteam

An AI-powered security operations agent that automates the full incident triage cycle: event discovery, detailed investigation, response recommendation, and compliance reporting. Built on Qwen Cloud with human-in-the-loop guardrails. SOC 2 CC6.8.3 compliant by design.

PythonQwen CloudMCPNIST CSFSOC 2
View submission
Contact

Start with the problem.

Available for fractional leadership and selected product engagements. Tell me about the business and the problem. I'll want to know what a good outcome looks like.

Schedule a meeting LinkedIn