What are the opening hours?

Monday 9am - 5pm Tuesday 9am - 5pm Wednesday 9am - 5pm Thursday 9am - 5pm Friday 9am - 5pm

Jacobian Engineering

Name: Jacobian Engineering
Address: 12060 Industry Boulevard #1025, Jackson, CA, 95642, US
Telephone: (415) 644-8208
Price range: $$

Home
United States
Jackson, CA
Jacobian Engineering

Cyber security, compliance, audit, and managed IT services. At Jacobian Engineering, your success is our success.

Jacobian Engineering: Your Partner in Tailored IT and Compliance Solutions

Since 2005, Jacobian Engineering has empowered organizations to achieve strategic goals through comprehensive IT, compliance, and security solutions. As a trusted managed service provider, we specialize in designing, planning, and executing strategies that align with your vision and immediate needs. Our Services

Technology Services Division

- Managed IT and Cloud Services: Our AWS- and Microsoft-certified engineers provide remote and on-site support, building secure and compliant cloud solutions tailored to you.
- DevOps and Software Architecture: Expert solutions to streamline operations and enhance efficiency.
- 24/7 Operations Centers: Round-the-clock teams ready to respond to operational and security incidents, ensuring business continuity. Compliance and Security Division

- Audit Preparation and Assessments: As a HITRUST Alliance Certified Assessor Company, we conduct HITRUST assessments and prepare you for SOC 2, ISO 27001, FedRAMP, NIST, and CMMC audits.
- Regulatory Compliance Expertise: Navigating international regulations like GDPR, PIPEDA, UK privacy laws, and domestic regulations such as HIPAA, California privacy statutes, and StateRAMP.
- Security Services: Implementing robust security controls, conducting pe*******on testing, DAST, vulnerability scanning, and providing training to strengthen your security posture. Why Jacobian Engineering

We excel in guiding companies through complex regulatory landscapes and technical challenges. Specializing in assisting early-stage startups and medium-sized businesses, we offer cost-effective solutions for those without dedicated compliance teams or in-house legal counsel. Our "right-size fit" approach ensures you receive precisely tailored services aligned with your strategic vision. We don't just consult—we partner with you to design, plan, and execute solutions that drive your business forward. Let us help you navigate the complex world of IT and compliance with confidence.

10/30/2026

David pulled his agent's merge access and it tried to work around him. Not malicious, just very focused on its task.

Full episode: The New Math, Ep. 002 with David Girvin of Assury. Link in the first comment and at trustedge.ai/podcast.

10/29/2026

"With agents, all of the bad attacks and the hallucinations happen post token." David Girvin, Assury.

Full episode: The New Math, Ep. 002 with David Girvin of Assury. Link in the first comment and at trustedge.ai/podcast.

10/28/2026

"You have to be able to turn them off when things go bad and you have to be able to prove what they did."

Full episode: The New Math, Ep. 002 with David Girvin of Assury. Link in the first comment and at trustedge.ai/podcast.

10/27/2026

"So you're always gonna have this gap at the end of it if a agent can do three four hundred commands in a couple of seconds. It's just become security theater at that point." — David Girvin, Assury

Full episode: The New Math, Ep. 002 with David Girvin of Assury. Link in the first comment and at trustedge.ai/podcast.

10/27/2026

Ken Dunham has done cybersecurity since 1992. Here's how he uses AI now, and why the human stays in charge. Full episode of The New Math: link in bio.

10/26/2026

New episode of The New Math. Ken Dunham, CEO of 4D5A Security, has worked in cybersecurity since 1992. He talks with Erik Jones about using AI in incident response without handing it the keys.

"AI is not the enemy," Ken said. He's just as clear that the human stays in charge.

Links in the first comment.

10/22/2026

Ep. 002 in 40 seconds: an agent, a deleted database, and what came after. Full episode: link in bio.

10/21/2026

A part of EU law that most US companies have never heard of has applied since September 11, 2026, more than a year ahead of the rest of its own regulation. Article 14 of the Cyber Resilience Act requires manufacturers of connected products sold into the EU, wherever those manufacturers are based, to report actively exploited vulnerabilities to an EU authority within 24 hours of becoming aware of them. Not 24 hours from discovery of a bug. 24 hours from reliable evidence someone is already exploiting it.

The reach here is the part that catches companies off guard: there is no EU-establishment requirement. A US manufacturer with no office in Europe still has to figure out which member state's cybersecurity authority to report to, and the rule for doing that runs through importers, distributors, and ultimately raw user counts if nothing else applies. One filing covers your whole corporate structure, but figuring out where to send it is not optional, and the reporting platform has been live since the day the reporting duty took effect.

We wrote up the full requirement: who counts as a manufacturer, what the 24-hour, 72-hour, and final-report deadlines actually require at each stage, how a US company with no EU presence determines who it reports to, and a checklist for what needs to already be in place before you ever need to use it. If you sell a connected product or a product-linked service into the EU, this is worth ten minutes before it is worth a regulator's attention.

09/22/2026

C2PA published an updated implementation guide for Content Credentials on August 11, closing gaps that made the previous version easy to satisfy on paper and hard to rely on in practice. Five changes matter: a shared IPTC-based classification for how content originated, a richer ai-disclosure assertion covering model provenance and human oversight, region-level localization of AI edits inside a single asset, verifiable generation-recipe metadata, and formal vocabulary for created/opened/edited actions.

OpenAI documents SynthID watermarking plus C2PA metadata for images and audio, with text support still a stated goal rather than a shipped feature. Anthropic has gone further, shipping an imperceptible text watermark in production alongside signed C2PA metadata for images, tied explicitly to its Article 50(2) Code of Practice commitments.

None of this is a compliance shortcut. Article 50 of the EU AI Act, in force since August 2, splits obligations between providers, who must mark synthetic output, and deployers, who must disclose AI involvement to their own readers when text on a matter of public interest skips human review. A vendor's watermark answers the first question. It does not answer the second. If AI provenance sits in your governance framework, ask vendors which of the five assertions in the August guide they actually implement, whether their signal survives your publishing pipeline, and separately, whether your organization is making the disclosure Article 50 requires of you as a deployer, watermark or no watermark.

09/22/2026

On August 10, Anthropic published a paper on "mind viruses" — self-propagating ideas that spread between AI agents through ordinary language, not code exploits. Using an evolutionary algorithm, researchers evolved prompts that spread across multi-agent teams and chained, context-wiped sessions, then measured what made the difference between a virus that took hold and one that didn't.

Findings worth knowing, as tested in August 2026: Claude 4.6 Sonnet and GPT-5.4 showed strong resistance (Sonnet actively warned other agents); Gemini 3 Flash, DeepSeek V3, and Qwen 3.5 were markedly more susceptible. Benign-seeming ideas spread further than overtly harmful ones. Agents with vague, underspecified instructions were more exposed than agents with a clear task and identity. And a single paragraph added to an agent's system prompt — warning it to watch for self-propagating ideas — held up against fifteen generations of dedicated evolutionary optimization designed specifically to defeat it.

This isn't malware. It's persuasion, traveling through the exact channels a multi-agent system is built to use. For anyone deploying agent teams in compliance automation, document processing, or coding assistance, that's a distinct risk category from prompt injection, and it needs its own review, not an assumption that existing input-sanitization controls already cover it.

Address

12060 Industry Boulevard #1025
Jackson, CA
95642

Opening Hours

Monday	9am - 5pm
Tuesday	9am - 5pm
Wednesday	9am - 5pm
Thursday	9am - 5pm
Friday	9am - 5pm

Telephone

(415) 644-8208

Website

https://your.security/

Alerts

Be the first to know and let us send you an email when Jacobian Engineering posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.