Digital security for family offices · Based in Hong Kong

In the age of AI,
guard your family’s digital assets and identity

AI versus AI. Digital security and private AI for family offices and HNW individuals with cross-border holdings — from email authentication and transfer verification to crypto assets and private family models.

Book a security auditExplore services

CISSP · CISA · CISP · CCIE · OSCP ／ NDA signed ／ Based in Hong Kong · cross-border clients

EXPOSURE MAPExposure scan● LIVE
FamilyEmailAccountsDevicesDeepfakePhishingKey leakProtected
ProtectedIdentified threatWatching
The sweep means continuous monitoring; the flowing red path is a risk already identified and handled.
AI impersonation blockTransfer verification gate
Transfer orderAI verificationcode word · out-of-bandtwo-person sign-offTrustedAllowSuspiciousBlock
The suspicious instruction is stopped at the gate — not an alert, but a transfer that never leaves.
Email authenticity checkSPF · DKIM · DMARC
InboundSPF — sender allowlistDKIM — signature checkDMARC — domain policyVerdict: authenticElse: blocked
All three checks matter — most family office domains fail on DMARC and DKIM.
Private AI data boundaryOn-device + cloud
On-device · data stays homeFamily AICloudGeneral querySensitive data
Sensitive data circulates inside the boundary only; the cloud is used for general tasks, with data kept in Hong Kong.
Risk scenarios

Four real risk scenarios for families

Losses rarely come from a “hacked system” — they come from impersonation, misdirected transfers, and key mismanagement.

01

AI impersonation (deepfake)

AI can impersonate you on a video call. In 2024, a Hong Kong company lost roughly HK$200 million this way.

02

Email impersonation & altered payee accounts

AI writes flawless emails that mimic your team’s tone. One altered payee account can move a large sum.

03

Crypto key risk

Once a private key is compromised, assets cannot be recovered. In the 2023 JPEX case, about 2,600 people reported losses of roughly HK$1.6 billion.

04

Data exposure

Handing family data to public AI is handing your private affairs to strangers.

Based in Hong Kong

Based in Hong Kong, serving families with cross-border holdings

Keystone Guardian is based in Hong Kong and serves family offices and HNW individuals with cross-border holdings — with a view across jurisdictions, bilingual and responsive.

Services

Four layers, from audit to guarding

Start with a low-friction security audit, harden by risk ranking, and move into crypto and private AI when needed.

01 / Entry

Security audit

Half a day to map email authentication, crypto exposure, AI-impersonation risk and network gaps, with a risk-ranked report.

From HK$8,800
02 / Retainer

Security retainer

Email anti-phishing, pre-transfer AI verification, network hardening, quarterly audits and on-call advice.

From HK$15,000/mo
03 / Project

Crypto asset security

Cold/hot wallet layering, multi-sig, key backup and asset handover planning.

From HK$50,000
04 / Project

Private family AI

Hybrid on-device and cloud deployment: sensitive data never leaves home.

From HK$100,000
Method

Three steps

We don’t sell tools — we deliver outcomes: map, harden, then guard year-round.

01 — Audit

Map exposure

Find the weakest links: email, accounts, devices, public information.

02 — Harden

Harden as needed

Deploy anti-phishing, AI-impersonation checks and crypto protections — no tool sprawl.

03 — Guard

Guard year-round

Quarterly audits and incident response; someone always answers.

Credentials & trust

Why us

Certified security professionals

CISSP · CISA · CISP · CCIE · OSCP — internationally recognised credentials.

Strict confidentiality

NDA signed; sensitive identifiers encrypted at rest; no data leaves.

Based in Hong Kong, serving cross-border families

Hong Kong as our base, with a view across jurisdictions; bilingual and responsive.

Start with a security audit

LEO GONG · CISSP · CISA · CISP · CCIE · OSCP　／　[email protected]　／　+852 9551 1011

Book a security audit