diff --git a/404.html b/404.html
index 02965c0..8e22c76 100644
--- a/404.html
+++ b/404.html
@@ -37,7 +37,7 @@
     <main id="main-content" class="wrap">
         <p class="kicker">404</p>
         <h1>That page is not here</h1>
-        <p>Try the <a href="/">home page</a>, <a href="/services.html">services</a>, or <a href="/contact.html">contact</a>.</p>
+        <p>Try the <a href="/">home page</a>, <a href="/about.html">about</a>, <a href="/services.html">services</a>, or <a href="/contact.html">contact</a>. Old <code>/resume</code> links belong on About.</p>
         <p class="mono"><a href="mailto:info@inputdrivesecurity.us">info@inputdrivesecurity.us</a></p>
     </main>
     <footer class="site-footer">
diff --git a/README.md b/README.md
index bc7f25e..9ac2f05 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # Input Drive Security
 
-Independent security consulting site for **Greg Gutman**. The live domain is [inputdrivesecurity.us](https://inputdrivesecurity.us). `inputdrivesecurity.com` and `inputdrivesecurity.net` 301 to that host.
+Independent security consulting site for **Greg Gutman**. The live domain is [inputdrivesecurity.us](https://inputdrivesecurity.us). Treat `inputdrivesecurity.com`, `www.inputdrivesecurity.com`, `inputdrivesecurity.net`, and old `/resume` URLs as outdated.
 
 This is a person, not a company listing. The site exists to take **contract** (federal programs and primes) and **ad-hoc** (commercial, scoped) work inquiries.
 
diff --git a/about.html b/about.html
index 93b8b23..3c89059 100644
--- a/about.html
+++ b/about.html
@@ -4,7 +4,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
-    <meta name="description" content="Greg Gutman — independent security engineer (CISSP, SSCP, CompTIA SecurityX). Twenty-plus years of RMF, cATO, AWS GovCloud, and enterprise network work for federal programs and commercial teams.">
+    <meta name="description" content="Greg Gutman — independent security engineer (CompTIA SecurityX). Twenty-plus years of RMF, cATO, AWS GovCloud, and enterprise network work for federal programs and commercial teams.">
     <meta name="theme-color" content="#0969da">
     <meta name="color-scheme" content="light dark">
     <link rel="canonical" href="https://inputdrivesecurity.us/about.html">
@@ -50,7 +50,7 @@ <h1>Greg Gutman</h1>
         <div class="grid-2">
             <article class="panel">
                 <h2>How I work</h2>
-                <p>Federal contractor roles (CONUS, Public Trust) cover the recent years: AISSO / SCA, GRC, and cloud architecture on systems that had to hold an ATO. Before that I ran enterprise networks, then SATCOM and telecom for DoD missions.</p>
+                <p>Federal contractor roles (CONUS) cover the recent years: AISSO / SCA, GRC, and cloud architecture on systems that had to hold an ATO. Before that I ran enterprise networks, then SATCOM and telecom for DoD missions.</p>
                 <p>The path is the proof: SATCOM, microwave, and fiber in high-consequence theaters; classified and unclassified network O&amp;M CONUS and OCONUS; AWS GovCloud architecture for DHS-supporting agencies; then GRC, SSPs, POA&amp;Ms, and continuous authorization (cATO) readiness at DOI’s IA/ACIO office.</p>
                 <p>I still like building small, privacy-respecting tools. Calculators and lab pages on this domain are demos, not the product. No ads, no analytics. Theme preference is the only thing stored in your browser.</p>
             </article>
@@ -69,30 +69,43 @@ <h2>Focus areas</h2>
 
         <section class="section" aria-labelledby="cred-heading">
             <h2 id="cred-heading">Credentials</h2>
-            <p class="muted">Only current certifications are listed. Expired vendor certs are not advertised.</p>
+            <p class="muted">Only current certifications are listed. Expired vendor certs are not advertised as current.</p>
             <div class="grid-2">
                 <article class="panel">
                     <p class="eyebrow">Current</p>
                     <ul class="cred-list">
                         <li>
-                            <strong>CISSP</strong>
-                            <span class="small">(ISC)² · member 444470 · issued June 2018</span>
+                            <strong>CompTIA SecurityX ce</strong>
+                            <span class="small">Active 20 May 2024 – 20 May 2027 · formerly CASP+</span>
                         </li>
                         <li>
-                            <strong>SSCP</strong>
-                            <span class="small">(ISC)² · issued August 2017</span>
+                            <strong>CompTIA Security+ (2008 edition)</strong>
+                            <span class="small">Issued September 2009 · does not expire</span>
                         </li>
                         <li>
-                            <strong>CompTIA SecurityX ce</strong>
-                            <span class="small">Issued May 2024 · formerly CASP+</span>
+                            <strong>CompTIA Network+ (2009 edition)</strong>
+                            <span class="small">Issued July 2009 · does not expire</span>
+                        </li>
+                        <li>
+                            <strong>CompTIA A+ (IT Technician)</strong>
+                            <span class="small">Issued July 2009 · does not expire</span>
+                        </li>
+                        <li>
+                            <strong>CompTIA IT Operations Specialist (CIOS)</strong>
+                            <span class="small">Issued July 2009 · does not expire</span>
+                        </li>
+                        <li>
+                            <strong>CompTIA Secure Infrastructure Specialist (CSIS)</strong>
+                            <span class="small">Issued September 2009 · does not expire</span>
                         </li>
                     </ul>
+                    <p class="small">Open to new certification exams, including when a program or prime sponsors the exam. That is work, not a visitor donation.</p>
                 </article>
                 <article class="panel">
                     <p class="eyebrow">Education &amp; training</p>
                     <p>B.S., Information Systems Management — University of Maryland Global Campus. A.S., Electronic Systems Technology — Community College of the Air Force.</p>
                     <p class="small">SANS cybersecurity coursework. Short courses (MIT, FIRST CVSS v4.0, Digital Forensics Essentials) stay in the training column, not the cert column.</p>
-                    <p class="small">I previously held Microsoft, Cisco, Juniper, and AWS certifications. They are expired, so they are not listed as current. The underlying work — enterprise routing, GovCloud, and operations — is still in scope.</p>
+                    <p class="small">I previously held CISSP (expired August 2024), SSCP (expired June 2025), Microsoft, Cisco, Juniper, and AWS certifications. They are expired, so they are not listed as current. (ISC)² Non-Member ID 444470. The underlying work — enterprise routing, GovCloud, and operations — is still in scope.</p>
                 </article>
             </div>
         </section>
@@ -116,7 +129,7 @@ <h2>Public profiles</h2>
         </section>
 
         <div class="banner">
-            <p class="small" style="margin:0;">This domain is the canonical site. <code>inputdrivesecurity.com</code> and <code>inputdrivesecurity.net</code> 301 here. Older resume or support URLs should be treated as outdated.</p>
+            <p class="small" style="margin:0;">Canonical site: <code>inputdrivesecurity.us</code>. Treat <code>www.inputdrivesecurity.com</code>, other <code>.com</code>/<code>.net</code> hosts, and old <code>/resume</code> URLs as outdated.</p>
         </div>
 
         <p><a class="btn" href="/contact.html">Work with me</a></p>
diff --git a/contact.html b/contact.html
index 87298f2..23ba105 100644
--- a/contact.html
+++ b/contact.html
@@ -107,7 +107,7 @@ <h2 id="form-heading">Optional message builder</h2>
                 </div>
                 <div class="field">
                     <label for="message">What do you need?</label>
-                    <textarea id="message" name="message" required placeholder="Role, system type, timeline, and any constraints (clearance, on-site, through a prime, etc.)."></textarea>
+                    <textarea id="message" name="message" required placeholder="Role, system type, timeline, and any constraints (on-site, through a prime, etc.)."></textarea>
                 </div>
                 <div class="cta-row">
                     <button class="btn" type="submit">Create email</button>
@@ -117,7 +117,7 @@ <h2 id="form-heading">Optional message builder</h2>
             </form>
         </section>
 
-        <p class="small">Also on <a href="https://linkedin.com/in/greggutman/">LinkedIn</a>. This is not a support desk and not a sponsorship page.</p>
+        <p class="small">Also on <a href="https://linkedin.com/in/greggutman/">LinkedIn</a>. Open to new cert exams if a program or prime sponsors the sitting. This is not a support desk and not a donation or sponsorship page.</p>
         <p id="lastModified"><time id="lastModifiedTime" datetime=""></time></p>
     </main>
 
diff --git a/index.html b/index.html
index 2a54469..93786ae 100644
--- a/index.html
+++ b/index.html
@@ -6,7 +6,7 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
     <meta http-equiv="X-Content-Type-Options" content="nosniff">
     <meta name="referrer" content="strict-origin-when-cross-origin">
-    <meta name="description" content="Independent security consulting for federal programs and commercial teams. CISSP, SSCP, and CompTIA SecurityX. Contract and ad-hoc work: ATO, cATO, NIST 800-53, GovCloud, and network architecture.">
+    <meta name="description" content="Independent security consulting for federal programs and commercial teams. CompTIA SecurityX. Contract and ad-hoc work: ATO, cATO, NIST 800-53, GovCloud, and network architecture.">
     <meta name="theme-color" content="#0969da">
     <meta name="color-scheme" content="light dark">
     <meta property="og:title" content="Input Drive Security | Contract and ad-hoc security consulting">
@@ -39,19 +39,39 @@
         "hasCredential": [
           {
             "@type": "EducationalOccupationalCredential",
-            "name": "CISSP",
+            "name": "CompTIA SecurityX",
             "credentialCategory": "ProfessionalCertification",
-            "recognizedBy": { "@type": "Organization", "name": "(ISC)²" }
+            "recognizedBy": { "@type": "Organization", "name": "CompTIA" },
+            "validFrom": "2024-05-20",
+            "validThrough": "2027-05-20"
           },
           {
             "@type": "EducationalOccupationalCredential",
-            "name": "SSCP",
+            "name": "CompTIA Security+",
             "credentialCategory": "ProfessionalCertification",
-            "recognizedBy": { "@type": "Organization", "name": "(ISC)²" }
+            "recognizedBy": { "@type": "Organization", "name": "CompTIA" }
           },
           {
             "@type": "EducationalOccupationalCredential",
-            "name": "CompTIA SecurityX",
+            "name": "CompTIA Network+",
+            "credentialCategory": "ProfessionalCertification",
+            "recognizedBy": { "@type": "Organization", "name": "CompTIA" }
+          },
+          {
+            "@type": "EducationalOccupationalCredential",
+            "name": "CompTIA A+",
+            "credentialCategory": "ProfessionalCertification",
+            "recognizedBy": { "@type": "Organization", "name": "CompTIA" }
+          },
+          {
+            "@type": "EducationalOccupationalCredential",
+            "name": "CompTIA IT Operations Specialist (CIOS)",
+            "credentialCategory": "ProfessionalCertification",
+            "recognizedBy": { "@type": "Organization", "name": "CompTIA" }
+          },
+          {
+            "@type": "EducationalOccupationalCredential",
+            "name": "CompTIA Secure Infrastructure Specialist (CSIS)",
             "credentialCategory": "ProfessionalCertification",
             "recognizedBy": { "@type": "Organization", "name": "CompTIA" }
           }
@@ -101,7 +121,7 @@ <h1>Security engineering for federal programs and commercial teams.</h1>
                 <a class="btn btn-whatsapp" href="https://wa.me/17039578321?text=Hello%20Greg%2C%20I%27d%20like%20to%20discuss%20contract%20or%20ad-hoc%20work." target="_blank" rel="noopener noreferrer">Message on WhatsApp</a>
                 <a class="btn btn-secondary" href="/services.html">See services</a>
             </div>
-            <p class="small">Reply typically within one business day. CONUS / remote. Public Trust background. Current certifications: CISSP, SSCP, and CompTIA SecurityX.</p>
+            <p class="small">Reply typically within one business day. CONUS / remote. Current certification: CompTIA SecurityX. Lifetime CompTIA A+, Network+, Security+, CIOS, and CSIS are current too.</p>
         </section>
 
         <section class="section" aria-labelledby="who-heading">
diff --git a/resume/index.html b/resume/index.html
new file mode 100644
index 0000000..d7ec3d6
--- /dev/null
+++ b/resume/index.html
@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta http-equiv="refresh" content="0; url=/about.html">
+    <meta name="robots" content="noindex">
+    <link rel="canonical" href="https://inputdrivesecurity.us/about.html">
+    <title>Resume moved | Input Drive Security</title>
+    <link rel="icon" href="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/assets/logo.svg" type="image/svg+xml">
+    <script>location.replace("/about.html");</script>
+</head>
+<body>
+    <p>The old resume URL is outdated. Credentials and background are on <a href="/about.html">About</a>.</p>
+</body>
+</html>
diff --git a/services.html b/services.html
index cf8e618..a33a009 100644
--- a/services.html
+++ b/services.html
@@ -77,7 +77,7 @@ <h2>Scoped jobs</h2>
         <section class="section">
             <h2>Also in the toolkit</h2>
             <div class="panel">
-                <p>Not the lead offer, but it shows up when the job is bigger than a control spreadsheet: enterprise LAN/WAN, fiber and structured cabling, SATCOM and microwave, 24/7 fault isolation. I previously held Microsoft, Cisco, Juniper, and AWS certifications; those are expired and are not listed as current. The operations background is not.</p>
+                <p>Not the lead offer, but it shows up when the job is bigger than a control spreadsheet: enterprise LAN/WAN, fiber and structured cabling, SATCOM and microwave, 24/7 fault isolation. I previously held CISSP, SSCP, Microsoft, Cisco, Juniper, and AWS certifications; those are expired and are not listed as current. The operations background is not.</p>
             </div>
         </section>
 
@@ -86,7 +86,7 @@ <h2>What I will not take</h2>
             <div class="panel">
                 <ul>
                     <li>Unauthorized testing of systems you do not own or cannot authorize in writing.</li>
-                    <li>Work that needs a registered company, facility clearance, or set-aside I cannot honestly claim.</li>
+                    <li>Work that needs a registered company or set-aside I cannot honestly claim.</li>
                     <li>Retainer-only “advisory” with no artifacts.</li>
                     <li>Anything that belongs in incident response with law enforcement or a full DFIR firm — I can triage, then hand off.</li>
                 </ul>
diff --git a/stylesheet.css b/stylesheet.css
index 08f5272..a8cc20d 100644
--- a/stylesheet.css
+++ b/stylesheet.css
@@ -373,6 +373,7 @@ textarea:focus-visible {
 .cred-list li { margin: 0; }
 .cred-list strong { display: block; }
 .cred-list .small { margin: 0; }
+.cred-list + .small { margin-top: 14px; }
 .eyebrow {
     font-size: 0.78rem;
     font-weight: 700;