We advise organisations at the intersection of AI, cybersecurity, and human behaviour — translating emerging technologies into clear strategy while strengthening resilience against evolving threats._
We partner with leaders to navigate AI, cybersecurity, and human risk — building systems that are not only intelligent and secure, but trusted.
At Hesed & Emet Advisory, we work at the intersection of AI, cybersecurity, and human behaviour — advising organisations on navigating complexity in an increasingly digital world.
We partner with leaders to translate emerging technologies into clear, actionable strategy, while strengthening resilience against evolving cyber and human risks. Our work spans strategic advisory, capability development, and training — grounded in the belief that technology alone is insufficient without aligning the people who design, use, and govern it.
Our approach is advisory-first. No tool sales, no vendor bias. We bring practitioner-level experience to every engagement and speak both the language of engineers and the language of the boardroom.
Aaron Ang is a senior cybersecurity and AI strategist whose career has operated at the intersection of national policy, digital resilience, and emerging technology. With a formative tenure at the Cyber Security Agency of Singapore (CSA), he has shaped initiatives that function at national scale — contributing to Singapore's cybersecurity posture, informing the direction of workforce and talent development, and building the capability of both public institutions and private enterprises to navigate an increasingly complex threat environment.
He brings a rare ability to work across the full spectrum: from identifying strategic market opportunities in emerging technology to architecting the governance frameworks and human systems needed to deploy them responsibly. His work spans national programmes, cross-sector partnerships, and executive advisory — always oriented toward the question of how technology can be adopted more effectively, and with greater confidence, by the people and organisations that depend on it.
Aaron is a trusted voice in Singapore's cybersecurity community — regularly called upon by national and regional media to provide expert commentary on major incidents, evolving threats, and the policy implications of an increasingly digital world. His perspective bridges practitioner depth with strategic clarity, making him a sought-after reference point for institutions, boards, and journalists alike.
Aaron is a sought-after voice at Asia's most prominent cybersecurity, AI, and digital policy forums — shaping conversations that matter at the highest levels of industry and government.
We advise on technology, invest in it, and carry the products we genuinely stand behind — both those we own and those we partner with.
Security's most persistent vulnerability has never been a system. It is the sum of the behaviours, habits, decisions, and cognitive patterns of every person in your organisation — compounding quietly until they become exploitable. Meridian is built to surface that exposure before it becomes an incident.
Combining AI-driven behavioural analysis with established psychological risk frameworks and the latest threat intelligence, Meridian continuously maps how people across your organisation interact with technology, make decisions under pressure, and respond to manipulation. The result is a living, dynamic risk profile that reflects your actual human attack surface — not a snapshot from your last awareness campaign, but a real-time reading of where you are today.
For executives, Meridian answers the questions that technical security tools fundamentally cannot: What does your organisation's human risk look like at this moment? Which teams, roles, or behavioural patterns present the greatest exposure? Where should intervention be targeted to produce the greatest reduction in risk? Meridian translates the invisible into the actionable — giving leadership the clarity to move with confidence rather than assumption.
The cybersecurity and AI talent crisis is not merely a shortage of certified professionals — it is a shortage of the right ones. Certifications and tool proficiencies are table stakes. What separates practitioners who excel in high-pressure, high-consequence roles from those who don't is something far harder to see in a résumé: how they think under uncertainty, how they communicate risk to non-technical leadership, how they behave when the answer isn't in a framework.
Caliber was built to find those qualities. Designed specifically for cybersecurity and AI roles, our assessment platform moves well beyond multiple-choice benchmarks — evaluating candidates through hands-on technical simulations, psychological profiling, and scenario-based challenges that reveal depth of reasoning, ethical judgment, and professional character. By integrating validated behavioural science with real-world technical environments, Caliber surfaces not just what a candidate knows, but who they are as a practitioner — and whether they are built for the complexity the role will demand of them.
Caliber is currently deployed by a national cybersecurity regulatory body as part of their talent identification and evaluation framework — a recognition of the platform's rigour, independence, and the reliable signal it provides in a domain where the cost of a wrong hire extends far beyond the balance sheet.
Virage began as the final-year project of an exceptional team of students from Nanyang Polytechnic — a group who saw the growing threat of voice and email scams and built something genuinely innovative in response. When we encountered their work, we didn't just admire it. We acquired it, invested heavily in its development, and brought it into our practice — because we believed in both the product and the people behind it.
At its core, Virage is a phishing and vishing simulation platform that places the human layer — the most exploited and least defended surface in any organisation — at the centre of cyber resilience. The platform generates realistic, multilingual, AI-driven simulations of email phishing and voice scam scenarios, modelled on real-world attack patterns and tuned to the way people actually communicate in Singapore and across the region.
Organisations using Virage don't just train their people — they measure vulnerability, track improvement over time, and build a culture where scepticism is a reflex, not an afterthought. It is the operational expression of everything we believe about human risk: that awareness alone is insufficient, and that the only way to know whether your people are ready is to test them before the adversary does.
Most organisations treat security as a series of events — a penetration test here, an audit there. Cyberbay is built on a different premise: that meaningful protection requires continuous visibility, persistent intelligence, and honest external challenge. Their platform converges AI-driven attack surface monitoring, real-time threat intelligence, and a pre-vetted global community of ethical security researchers into a single, coherent ecosystem — one that finds what your internal teams cannot, and keeps finding it as your environment evolves.
We partner with Cyberbay because they operationalise something we advocate for in every client engagement: the shift from reactive defence to proactive resilience. Through Cyberbay's crowdsourced vulnerability discovery programmes, organisations gain access to a diverse, motivated community of researchers whose breadth of technique and independence of perspective surfaces critical weaknesses that structured assessments routinely miss. Their threat intelligence capability — tracking adversary activity, attack signals, and digital exposure across industries and regions — gives clients the early warning needed to respond before incidents escalate.
Together, we deploy Cyberbay's capabilities as part of integrated advisory engagements — helping clients not just identify their exposure, but understand it in the context of their risk appetite, governance frameworks, and the human factors that ultimately determine whether vulnerabilities get remediated or remain open. Because in our experience, the difference between a finding and a fix is rarely technical. It's organisational.
Sustainable digital resilience cannot be built at the top of the talent pipeline alone. The practitioners, architects, and decision-makers who will define how Singapore and the region navigates the next decade of technological complexity are being shaped right now — in classrooms and enrichment centres, in the first moments where a young person encounters a problem and learns whether they can build their way through it.
Codeezy is where that foundation is laid. Founded by educators who have taught over 500 students between them, Codeezy builds genuine, lasting digital capability in children through structured, outcome-led coding programmes. The design principle is unambiguous: every student finishes having built and launched something real — an app, a website, a game. Not a certificate of participation, but tangible evidence of capability. That philosophy — that learning only lands when it produces something — is one we recognise and deeply respect, because it mirrors how we approach capability development at the organisational level.
Our partnership with Codeezy reflects a conviction that runs through everything H&E does: that the human layer matters at every stage. The talent we need in cybersecurity and AI tomorrow is learning to code today. Investing in that pipeline early, deliberately, and well is not peripheral to our mission — it is an extension of it.
All engagements are presented with client confidentiality in mind. Details are indicative of scope and nature of work.
Whether you're facing an immediate challenge or planning your long-term AI and security posture, we'd like to hear from you. Engagements typically begin with a complimentary 60-minute discovery call.