In 2002, Aitel started his security company, Immunity, from his apartment in Harlem and began consulting with the big financial services companies. But soon he developed an automated exploitation tool called Canvas that allowed his customers to test genuine threats—some known, some zero-day exploits Aitel developed himself—on their systems to mimic the techniques of advanced nation-states and cybercriminals.

