Kevin Baker, founder of BIMASS, brings over three decades of technology and cybersecurity experience to our Ace Founder Spotlight Series.
Growing up in the US Virgin Islands with a Commodore 64, Kevin's passion for electronics led him from the early days of bulletin board hacking to serving as a state government Chief Information Officer (CIO) and Chief Information Security Officer (CISO).
After growing tired of bureaucratic politics, he retired from public service, rejected offers from major consulting firms, and launched his own risk management and consulting firm.
I sat down with him to discuss how a late-night domain search led to his company's name, why he believes AI will make people lazy before it takes their jobs, and how brutally honest consulting wins the best contracts.
Both questions and answers have been lightly edited for length and clarity.
The Conversation
What is one thing about being a founder that nobody warned you about?
Taxes. After I left my government job, I started subcontracting in cybersecurity across Florida, Boston, and Alaska.
That year was phenomenal, and my accountant eventually warned me that I needed to get incorporated because Uncle Sam loves a piece of it.
I also learned quickly that entrepreneurship requires you to overcome new challenges daily, but that constant challenge is what keeps me going.
What is the story behind the name BIMASS?
When I was getting incorporated, I knew I wanted something unique that involved a blueprint, hence our shield logo.
I originally wanted the name "Blueprint Information Management & Security Services," but at 2:00 in the morning, I realized that was way too long for a domain name or email address.
I just took the initials—BIMASS—found the domain was available, and established the company on July 2, 2014.
How would you describe what BIMASS does to a new prospect?
BIMASS is a cybersecurity consulting firm that focuses heavily on risk management services.
We have our own proprietary product, currently in its third iteration after seven years, that runs risk assessments.
It is designed to automate many of the tasks expected of a CISO, allowing an executive assistant or CEO to pull board reports automatically and freeing up the CISO to focus on high-level interpretation rather than hands-on IT support.
Alongside our software and consulting, we also resell technology equipment.
During COVID-19, when remote work surged, we shipped pallets of laptops to customers who needed hardware immediately.
What makes BIMASS unique compared to the competition?
We view ourselves as honest advisors rather than salespeople. We don't sugarcoat the truth.
I once reviewed an assessment with a CTO and bluntly told him his network looked like a Christmas tree because every indicator was flashing red.
Ten minutes later, I found out that guy was actually the founder of the company. Because I was honest and upfront, it landed us a highly lucrative contract.
What are your thoughts on AI in the cybersecurity space?
AI can absolutely be leveraged to eliminate some tasks, but I do not foresee it completely taking over because it does not have all the answers.
We were recently working on a problem where a developer was searching AI for the solution, and I figured it out manually 10 minutes before the AI did.
My biggest concern is that people will become too dependent on the technology, get lazy, and stop thinking critically.
However, we are actively building AI functionality into the next four releases of our own product to further reduce the strain on CISOs.
What has been your most effective strategy for winning new business?
Word of mouth and referrals. We spent a lot of money trying other marketing approaches and got nothing from them.
Cybersecurity relies entirely on trust. I also spent years attending conferences to network and hear the inside scoop from manufacturers like AWS and Azure.
They will tell partners what isn't working with their systems, which allows us to steer our clients in the right direction and build stronger relationships.
What is one final tip you would leave for early-stage founders?
Believe in your vision and have faith. It is nice to get someone's opinion, but stick to your vision, take the risk, and it is going to work out.
Our Closing Thoughts
Kevin’s journey illustrates the power of adaptability and uncompromising honesty in building a resilient B2B technology firm. Key takeaways include:
Honesty is a Growth Strategy: In an industry clouded by buzzwords, delivering blunt, transparent assessments builds the deep trust required to secure long-term, lucrative contracts.
Diversify Revenue Streams: BIMASS survived global disruptions by offering both high-level consulting and practical hardware reselling, shipping pallets of laptops when consulting engagements stalled during the pandemic.
AI is a Tool, Not a Replacement for Thinking: While AI is powerful enough to be integrated into upcoming BIMASS software releases, founders and engineers must guard against intellectual laziness and over-reliance on LLMs.
Network for Intel, Not Just Leads: Attending industry conferences is less about finding direct customers and more about building relationships with vendors to get the unvarnished truth about their products.
Connect With Our Guest
Website: BIMASS
LinkedIn: Kevin Baker
BIMASS LinkedIn
