A founder-led
security practice.
Edictum Labs is an independent, research-led offensive security and engineering practice being established in Prague. It exists to do deep technical work, honestly, at a senior level.
- Form
- Independent · founder-led
- Base
- Prague, Czech Republic
- Status
- Being established
Depth is the whole point.
Most security work is organised for coverage and throughput. The deepest findings come from the opposite posture: time, focus, and genuine curiosity about how one system really works.
Edictum Labs was founded to make that posture the default rather than the exception. The work is narrow by choice — a small number of engagements, taken seriously, with real investigation behind each one.
The standard is simple and non-negotiable: understand a system well enough to say something true about it, and then prove it.
Small, senior, and direct.
The person who scopes your engagement is the person who does the work.
There is no layer of account managers, no handoff to a junior team, and no incentive to manufacture findings. Engagements are bounded, authorized, and documented. When a lighter approach would serve you better, we say so.
Founded and led by Arnold Cartagena, the practice keeps its surface area small on purpose — so the technical signal stays high.
What the work is held to.
Depth over coverage
Evidence over assertion
Causes over symptoms
Clarity over theatre
A separate product project.
Alongside the Labs, the founder develops Edictum — a separate product focused on runtime governance for AI agents. It is an independent initiative, not a Labs service, and is mentioned here only for context.
The Labs’ client work and the Edictum product are kept distinct: research engagements are never a sales channel for a product.
Projects
Runtime governance for AI agents — decide before the agent acts, record every decision. A separate product initiative, developed independently of the Labs’ client work.
Operating from Prague.
Prague is the intended operating base — central, connected, and close to a deep European engineering community.
Engagements are delivered remotely and, where appropriate, on-site, for organizations across Europe and beyond.
Edictum Labs is being established as an independent practice; a Czech legal entity has not yet been incorporated. Formal registration details will be published here once available.
Work with a practice that goes deep.
Reach out directly — arnold@edictum.ai for engagements, or the contact page for all options. You will be talking to the person doing the work.
- Reply
- Within two business days
- Authorization
- Written, before any testing
- Based in
- Prague, Czech Republic