It was 2:00 in the morning.

I had an information security assessment report due in a matter of hours.

FRSecure was young — just a handful of employees — and I was routinely working 90-plus hour weeks. Not because I was lazy with my time. Because there was that much work to do.

I wasn’t procrastinating. I just hadn’t had time to finish.

Sitting there, exhausted, staring at an incomplete report, a voice inside my head said something that probably sounds familiar:

“You could skip a few sections. Nobody would ever know.”

And the thing is — it was true.

The customer would have been thrilled with what they received. They wouldn’t have known what was missing. I would have gotten a couple hours of sleep before the delivery.

It made complete, rational sense.

No more than a second passed.

Then another voice:

“Yeah, but you would know.”

Shit.

That second voice hit me somewhere I couldn’t ignore. It went straight to the core of why I started this company in the first place — to fix a broken industry. And a broken industry doesn’t get fixed by people who cut corners when nobody’s looking.

I finished the report.

---

I’m not telling this story to pat myself on the back. I’m telling it because that moment — that internal negotiation at 2am — is one that everyone in this industry faces.

Consultants. Analysts. Engineers. CISOs. Everyone.

And most people don’t talk about it.

The cybersecurity industry has an integrity problem. Not a skills shortage. Not a tools problem. An integrity problem. We rationalize. We cut corners. We deliver “good enough” and call it done. We sign off on things we haven’t fully vetted. We write reports that look complete but aren’t.

And most of the time, nobody knows.

Except us.

The people we’re supposed to be protecting depend on us to do the work right when it’s inconvenient. When we’re exhausted. When the deadline is tomorrow morning and nobody in the world would notice if we skipped a section or two.

Integrity isn’t something you have in the easy moments.

It’s what you do in the hard ones.

---

So let me ask you directly: When was the last time you heard that second voice — and what did you do with it?

You don’t have to answer me. But you do have to answer yourself.

That’s the job.

That’s always been the job.