About Burning Tree

Helping organisations understand their current capability, secure what matters most and confidently transform for the future.
Burning Tree is an independent cybersecurity advisory firm that helps organisations build resilience through better judgement, stronger governance and practical transformation.

We work with boards, executives and security leaders to understand cyber risk, strengthen the foundations of digital trust and deliver measurable improvement across the enterprise.

Our approach combines independent thinking, executive judgement and deep technical expertise. Whether assessing cybersecurity maturity, strengthening identity, preparing for post-quantum change, adopting Artificial Intelligence securely or leading enterprise-wide transformation, our focus remains the same:

Helping organisations make better cybersecurity decisions.

The Story of Burning Tree

Burning Tree was founded on the belief that cybersecurity should enable organisations, not constrain them.

Over more than two decades, we have worked alongside some of the world’s leading organisations, helping them navigate complex cybersecurity challenges, build lasting capability and deliver meaningful change.

From global financial institutions and government departments to retailers, utilities, education providers and technology organisations, our experience has shown that successful cybersecurity is rarely achieved through technology alone.

It is achieved through good leadership, informed decision-making and the ability to balance business priorities with security, resilience and innovation.

That philosophy continues to shape everything we do today.

What Makes Burning Tree Different?

Many organisations provide cybersecurity advice.

Burning Tree brings something different.

We combine executive judgement, independent thinking and practical delivery experience to help organisations make informed decisions that strengthen resilience over the long term.

Our recommendations are always shaped by your objectives, culture and risk appetite—not by products, vendors or implementation targets.

Rather than focusing on isolated technical problems, we help organisations understand the bigger picture, identify the priorities that matter most and build sustainable cybersecurity capability.

Our Strategic Framework

Everything we do is built around three simple principles.

Understand

We help organisations understand their current capability through independent assessment, benchmarking and research.

Secure

We strengthen the foundations of digital trust through Identity & Access Management, Cryptographic Resilience and Secure AI Adoption.

Transform

We help organisations turn strategy into measurable outcomes through Security Transformation and Executive Cyber Advisory.

This simple framework enables organisations to move confidently from understanding risk to delivering lasting resilience.

Our Values

Our values define how we work with every client.

Integrity

We provide honest, independent advice based on evidence, experience and what is right for the organisation.

Innovation

Cybersecurity continues to evolve. We help clients prepare for emerging technologies, changing threats and new ways of working without losing sight of practical business outcomes.

Impact

We measure success by the improvements our clients achieve. Our focus is always on delivering meaningful outcomes rather than producing reports or recommendations that never become reality.

Leadership

Burning Tree is led by experienced cybersecurity professionals who have spent their careers helping organisations navigate complex security, technology and business challenges.

Our leadership combines strategic thinking with practical delivery experience, enabling us to work comfortably with boards, executives, technology leaders and operational teams alike.

We understand that successful cybersecurity requires more than technical expertise. It requires leadership, communication and the ability to influence change across the organisation.

David Lello — Founder, CEO & Cyber Executive

Burning Tree was founded by David Lello, a cybersecurity leader with more than 30 years of international experience across financial services, government, energy, technology, and other highly regulated sectors.

David has led some of the earliest and most complex Identity & Access Management, cyber risk, and security transformation programmes, and has advised boards and executives across Europe, Africa, and beyond. His leadership combines deep technical understanding with strategic insight, clear communication, and a strong commitment to integrity and stewardship.

Sarah Lello — Chief Financial Officer

Sarah Lello serves as Burning Tree’s Chief Financial Officer, providing financial leadership, governance, and operational oversight to support the firm’s sustainable growth.

Sarah brings a strong focus on financial discipline, transparency, and stewardship, ensuring that Burning Tree operates responsibly, invests wisely, and remains aligned with its values-led mission. Her role is central to maintaining the trust of clients, partners, and associates as the business continues to evolve.

Our Associate Network

Burning Tree operates through a carefully selected network of experienced associates.

Each associate is recognised for their specialist expertise and real-world delivery experience. Together they provide clients with access to deep capability across cybersecurity strategy, identity, governance, architecture, resilience, Artificial Intelligence, cryptography and transformation.

This flexible model allows us to assemble the right expertise for each engagement while maintaining the personal service, independence and agility that define Burning Tree.

Mark Sones — Associate Director

  • CTO, CISO
  • Cyber Executive
  • Technical Wiz

Maeson Maherry — Associate Director

  • COO
  • Cyber Executive
  • Crypto Genius

Lee Day — Associate Director

  • Cyber Consultant
  • Business Process Security
  • Astro Physicist

Sanjay Charavanapavan — Associate

  • Cyber Executive
  • Consultant
  • Phenomenal Architect

Doug Simmons — Associate

  • Cyber Executive
  • Research
  • Legend

Nigel Edwards — Associate

  • Cyber Executive
  • Communication Security
  • Technical Virtuoso

Who We Work With

Our clients range from ambitious organisations building cybersecurity capability for the first time to large enterprises leading complex transformation programmes.
Our experience spans:

  • Financial Services
  • Government
  • Retail
  • Energy & Utilities
  • Telecommunications
  • Technology
  • Healthcare
  • Education
  • Professional Services
  • Critical National Infrastructure

Regardless of size or sector, our objective remains the same:

To help organisations make better cybersecurity decisions and build lasting resilience.

Why Clients Choose Burning Tree

Clients choose Burning Tree because we combine:

  • Independent advice and technology-neutral thinking
  • Executive judgement shaped by real-world experience
  • Deep specialist expertise across modern cybersecurity disciplines
  • Practical, measurable approaches to transformation
  • Long-term partnerships built on trust and integrity

We believe the future belongs to organisations that understand their current capability, secure what matters most and confidently transform for what comes next.

Let’s Build Resilience Together

Whether you are strengthening identity, preparing for post-quantum cryptography, adopting Artificial Intelligence securely, measuring cybersecurity maturity or leading strategic transformation, Burning Tree provides the clarity, leadership and expertise to help you move forward with confidence.
Let’s start the conversation.