It's possible. Years ago I knew a few security folks who were moonlighting as independent security consultants. They did an assessment of a financial institutio

It's possible. Years ago I knew a few security folks who were moonlighting as independent security consultants. They did an assessment of a financial institution, caused some downtime, and there was a lawsuit. Turns out they hadn't incorporated and it was pretty terrible for them. Let this be a lesson. Always Always Alway create a business entity. Separation == protection