The Company
Security work built on authorization, integrity, and useful results.
Ethical Access is a North Carolina cybersecurity consulting firm founded by David Carraway. The company focuses on helping clients uncover vulnerabilities through authorized security testing and translate technical findings into practical improvements.
The goal is not simply to identify problems. Ethical Access works to explain what each weakness means, why it matters, and what should be addressed first—giving technical teams and organizational leaders a clearer path toward stronger security.
Meet the Founder
David Carraway
David Carraway is the founder of Ethical Access Inc., a cybersecurity professional, and a Teaching Instructor in East Carolina University’s Department of Technology Systems within the College of Engineering and Technology.
His interest in technology began early. As a child, he studied computer hardware and networking at the public library, built computers from individual components, and began programming. That self-directed foundation developed into more than 25 years of experience with technology, networked systems, infrastructure, cybersecurity, and technical problem-solving.
Today, his work spans penetration testing, network and system security, digital forensics, incident response, security compliance, SIEM platforms, cloud and virtualization environments, and SCADA/industrial-control-system security.
2025 CEH Hall of Fame
In 2025, David was named one of 100 professionals inducted into the EC-Council Certified Ethical Hacker Hall of Fame. The recognition highlights certified ethical hackers whose accomplishments, leadership, professional growth, and contributions have made a meaningful impact on the cybersecurity community.
East Carolina University’s College of Engineering and Technology also recognized the honor and David’s work as an educator and cybersecurity professional.
Education and Teaching
Turning technical experience into practical education.
David earned both his Bachelor of Science in Industrial Technology and Master of Science in Network Technology from East Carolina University. He now teaches in ECU’s information and cybersecurity program, where his courses emphasize hands-on learning, ethical decision-making, and the practical skills students need to protect modern systems and networks.
His work as an educator strengthens Ethical Access by keeping the company connected to current security technologies, workforce needs, emerging threats, and the importance of communicating complex technical issues clearly.
Areas of Expertise
Broad technical knowledge with a security-first perspective.
Professional Approach
Direct expertise. Clear communication. Actionable findings.
Authorized and Ethical
Testing is performed within an agreed scope and with respect for client systems, data, and operational requirements.
Technically Grounded
Findings are evaluated in context so clients can distinguish meaningful risk from low-value noise.
Focused on Improvement
Recommendations are prioritized and explained in language that supports both technical remediation and leadership decisions.