Tom Isgren
CEO & Founder, Bright Interaction
I was trusted by Nestle, Pfizer, Handelsbanken, and Brownells as a support technician. I was being groomed to become a Product Owner. Then the company restructured and let me go anyway.
Instead of finding another job, I built the entire stack from scratch: a server management platform (Dockyard), a CRM with AI assistant (BrightCRM), a cookie consent platform (CookieProof), a security scanner (SVAR), a Chrome extension with 80+ audit checks (Site Inspector), and more. All running on a single European VPS for about 500 kr/month. The same capabilities on SaaS would cost 5,000+ kr/month.
I've scanned 599 Swedish law firms and 17 cybersecurity companies. My own infrastructure scores 100/100 on the same scanner I use for everyone else, with a 10% attack surface (industry average is 60-70%).
I write about infrastructure, security, compliance, and the argument for owning what you build. Everything I know is documented. Every setback became a lesson. Every broken server became a security protocol.
What I do
Replace SaaS with open source
I help companies move off per-seat SaaS tools and onto self-hosted open source alternatives they actually own. CRM, email, chat, automation, SSO, analytics. All running on European servers with no vendor lock-in and no per-seat pricing.
Security scanning and compliance
I built SVAR, a security scanner that runs 16 automated tests on any domain in under two minutes. It checks TLS configuration, email authentication (SPF, DKIM, DMARC), security headers, cookie compliance, and more. I use the same scanner to produce industry benchmark reports.
Cookie consent that actually works
CookieProof is a consent management platform I built to meet IMY enforcement standards for Swedish websites. It blocks tracking scripts until the visitor opts in, supports multiple tenants for agencies, and generates PDF compliance reports for audits.
Infrastructure and migration
Full migration from cloud SaaS to self-hosted open source. I handle the setup, data migration, DNS, security hardening, monitoring, and ongoing maintenance. The goal is infrastructure you control on servers in your jurisdiction, with backups and updates handled for you.
Recent articles
Cybersecurity Industry Benchmark
17 companies audited. Average: 73/100. Highest: 81.
NIS2 Compliance Checklist
Step-by-step checklist for Swedish businesses.
Free Website Security Scan
How to audit your site in minutes, for free.
Slack vs Mattermost for GDPR
Data residency, self-hosting, and compliance compared.