01
Application development
Build a complete product, from the interface to services and data. Define clear boundaries between responsibilities.
See the PrismaSec architecturePortfolio // Development & security
Romain StrideDevelopment & cybersecurity
I build applications and explore their weaknesses. As the founder of PrismaSec, I connect software development, offensive security, and systems knowledge.
Software engineeringOffensive security
00 // Services
Assess your systems. Train your teams.
Web, API, cloud, and network security audits, awareness sessions, and technical workshops tailored to your systems and your team.
Security audits
Applications, APIs, cloud, and networks: reproducible findings and fixes ranked by priority.
Explore security auditsTraining & workshops
Security awareness and practical exercises suited to your team’s experience.
Explore training options01 // Skills
Build. Test. Automate.
02
Offensive security
Analyze access controls, business logic, and web/API vulnerabilities. Turn technical reasoning into reproducible evidence.
Read my API research03
Infrastructure & automation
Orchestrate operations, secure delivery, and make changes reviewable and reversible.
Explore PrismaSec delivery02 // Background
Understand systems. Build better software.
- Foundations
École 42
Training focused on programming and systems knowledge: C, assembly, problem solving, and technical autonomy.
- 2025 — present
PrismaSec founder
Product direction, application architecture, and security engineering. A project connecting development, operations, and offensive research.
03 // Research & writing
The reasoning behind the technology.
Application-security research, guides, and write-ups: problems explained, methods documented, and evidence you can examine.
Preparing a SaaS product for a web and API pentest
A worked scope and access matrix, readiness gate, and operational checklist for preparing a SaaS web and API security assessment.
Read the articleTesting multi-tenant API authorization beyond checklists
A worked tenant and role matrix, request examples, workflow tests, and regression pseudocode for assessing multi-tenant API isolation.
Read the articleFrom finding to retest: making pentest reports actionable
A fictional cross-tenant export finding shows how evidence, root cause, impact, remediation, and retest criteria become verifiable engineering work.
Read the article04 // Contact
Get in touchLet’s talk development and security.
A role, a project, or a technical collaboration? Let’s discuss what we can build together.