About armsec: Armed & Secure

armsec is a Stockholm-based security advisory founded by an experienced IT leader, security specialist and infrastructure architect. We believe that security should enable business, not slow it down.

Why armsec exists

Anyone can say they know AI, sustainability, IT, compliance or cyber security. Saying it is easy, and the market is full of polished slides and the right buzzwords. But knowing the words is not the same as having the knowledge, the experience and the connection to reality that only comes from doing the work. We have done the work. We have built the systems, carried the responsibility and lived with the consequences of our decisions. That is why our advice holds up when it meets reality.

What we stand for

Integrity

We give honest advice, even when it is not what you want to hear.

Experience

Everything we recommend, we have done ourselves in regulated environments.

Partnership

Your goals are our goals. We succeed when you do.

People

The founder

Martin Vallée

Martin Vallée

Founder · Chief Security Officer

Experienced IT leader, security specialist and infrastructure architect. Martin has delivered seven PCI DSS certifications, most recently as CSO at a cybersecurity SaaS provider serving banks and finance, where he led the Security and Technical teams through the 2025 renewal. His experience spans AI, privacy and GDPR, compliance, software development, agile methodology and leading organisations and teams, as well as cloud security architecture, SIEM and incident management. He speaks at IT security conferences on cloud security challenges and the geopolitical risks of cloud dependency. Outside work he plays curling for Team Sweden: World Senior Curling Championship 2026 in Geneva, Swedish champion, more than 10 years in Elitserien, and the same team for more than 20 years.

LinkedIn

Track record

Experience from the real world

Founder

armsec

Executive advisory, compliance and secure AI for organisations that need someone who has done it before.

Curling, Team Sweden

World Senior Curling Championship 2026, Geneva

Represented Sweden at the World Senior Curling Championship. Swedish champions, more than 10 years in Elitserien, and the same team for more than 20 years.

Chief Security Officer

Cybersecurity SaaS provider

Leads the Security and Technical teams at a Northern European cybersecurity SaaS provider serving banking, finance, insurance, telecom and hosting. Led the 2025 renewal of the company's PCI DSS certification, one of seven PCI DSS certifications Martin has delivered.

Founder & lead developer

Patient system for private healthcare

Designed, developed and operates a patient system for private healthcare providers, with applications connected to SLL (Region Stockholm). In production with customers for 15 years.

Security Consultant

Major Nordic bank

Deployed a web application firewall, configured its policies and rules, and was responsible for ongoing maintenance.

Security Administrator

Swedish retail group with its own bank

Security analysis, administration and maintenance of the group's SIEM, incident manager and PKI administrator.

Security & infrastructure

Earlier assignments

Built an encrypted, secure Linux standard office environment with full-disk encryption, including encryption profile maintenance and support.

Proven in practice

Not just talk. Requirements turned into reality.

Compliance, privacy and AI only matter when they work in real systems. Every area we advise on is one we have delivered hands-on.

On paper

PCI DSS

In practice

Seven PCI DSS certifications completed. The latest was led as CSO, for a platform storing card and financial data.

On paper

Patient data & healthcare

In practice

Designed, developed and operates a patient system for private healthcare, with applications connected to SLL. In daily use by customers for 15 years.

On paper

Monitoring, incidents & PKI

In practice

Operated the SIEM, acted as incident manager and administered PKI for a large Swedish retail group with its own bank.

On paper

Application security

In practice

Deployed a web application firewall and configured its policies and rules, protecting applications at one of the largest banks in the Nordics.

On paper

Cloud security & geopolitics

In practice

Speaks at IT security conferences on the biggest security challenges in the cloud, and writes on the geopolitical risks of cloud dependency.

On paper

AI, privacy & delivery

In practice

Long experience bringing AI, privacy and GDPR into real software development. Delivered with agile methods, not slide decks.

Curling: teamwork at world level

Outside work, Martin plays curling at the highest level. In 2026 he represented Sweden at the World Senior Curling Championship in Geneva, the team are Swedish champions and have played more than 10 years in Elitserien, Sweden's top division. The same team has played together for more than 20 years. Curling is the ultimate team sport: four players, one stone at a time, and nothing works unless everyone knows exactly what to do. The skip reads the ice and calls the shot, the thrower delivers, the sweepers adjust the line in real time, and every decision is communicated clearly and trusted by everyone. That is how we believe security and technology teams should work too.

  • Clear roles: everyone knows their job in every end
  • One voice calls the shot, and everyone commits to it
  • Constant communication, adjusted in real time
  • Trust built over more than 20 years together
  • Preparation and practice, so it works under pressure
  • Review every end, and improve the next one

How we work

Senior people only, short decision paths and full transparency. We prefer long-term partnerships where we can take real responsibility for outcomes.

  • Senior specialists only
  • Fractional, project or continuous engagements
  • Based in Stockholm, working across the EU

Track record · PCI DSS

Seven PCI DSS certifications, delivered

PCI DSS is one of the most demanding standards in security. armsec founder Martin Vallée has taken organisations through seven PCI DSS certifications. The most recent was at a Northern European cybersecurity SaaS provider serving banks, finance, insurance, telecom and hosting, whose platform stores and manages sensitive card and financial data. As Chief Security Officer, he led the Security and Technical teams through the 2025 renewal.

7 PCI DSS certifications completed
Latest renewal in August 2025, led as CSO
Card and financial data handled under PCI requirements
Customers in banking, finance, insurance, telecom and hosting

Let us talk

Whether you have a concrete project or just want to discuss an idea, we would love to hear from you.

Email us