The situation
An independent security assessment (attached) found two components of the building's camera system —
the Dahua recorder and the IntuVision analytics server — reachable
directly from the public internet, confirmed from an outside network. This bypasses the isolation
the camera network was meant to have and is, in my view, the most urgent issue facing the system
today. The root cause is a familiar one: several vendors involved, none accountable for the whole.
What we propose — a single point of accountability to close the exposure
- Coordinate across the parties — your integrator, IntuVision, and the network/ISP — so the
fix actually happens instead of falling between them.
- Replace risky remote access with a secure tunnel. Remove the open internet ports and stand
up an authenticated VPN / Tailscale connection, so your vendor keeps the remote
access they need without exposing the recorder to the world.
- Verify independently. Re-test from an outside network to confirm every exposed port is
closed to the public internet.
- Report. Deliver written confirmation that the exposure is eliminated — or, where a fix
requires new equipment or vendor action, a clear plan to get there.
Scope boundaries — so there are no surprises. Equipment purchases or replacement
(for example, if the recorder must be swapped) and any fees charged by your existing vendors are
separate and remain the Board's decision. This is a one-time remediation engagement, not an ongoing
monitoring service. Where a risk cannot be closed without new hardware or third-party action, my
deliverable is an itemized plan the Board can execute — I can only carry it as far as coordination and
verification allow.
Fees
$300 $150 / hour — a 50% discount for the Board.
Offered as a resident of the building and a founding-stage local firm. Estimated
6–10 hours; billing will not exceed a hard cap of $1,500 without the Board's further
approval, and you are billed only for hours worked.
Why Elberta Labs
Elberta Labs exists to be a single integrator in place of disconnected vendors — the
exact gap that created this problem. I am also a resident here, so my interest is fully aligned
with the Board's: a secure, reliable system. This engagement is deliberately limited to fixing the
exposure; any future equipment decision would be a separate, transparent process.
Aref Kashani
Founder, Elberta Labs · Resident, The Gallery
(425) 598-5288 · hello@elbertalabs.com