Freelance services

Security audits and training for your business.

Web and API pentests, cloud and network audits, security awareness, and technical workshops. Each engagement starts with an agreed scope and objectives.

Contact me

Security audits

Before a launch or after a change, testing covers a scope defined and authorized with you.

Web application pentest

I test your application for weaknesses that could allow unauthorized access or expose your customers’ data.

Who it helps

Businesses with a SaaS product, customer portal, or business application before launch or an important milestone.

What you receive
  • A summary for decision makers
  • Findings your team can reproduce
  • Fixes ranked by priority
Technical scope — Web application pentest
  • OWASP Top 10
  • Authentication & session
  • Business logic
  • Sensitive data
Discuss this audit — Web application pentest

API security audit

I check the connections between your applications and services to identify misuse of access and insufficiently protected data.

Who it helps

Businesses with mobile applications, public APIs, or connections to partner services.

What you receive
  • An overview of identified risks
  • Technical evidence of weaknesses
  • Recommendations to strengthen protections
Technical scope — API security audit
  • REST & GraphQL
  • Object-level access
  • Authorization
  • Business-flow abuse
  • Rate limiting
Discuss this audit — API security audit

Cloud & deployment audit

I review access, configuration, and application deployment to identify what leaves your cloud environments exposed.

Who it helps

Businesses using AWS, Azure, or Kubernetes that want to secure their infrastructure and deployments.

What you receive
  • Possible access paths for an attacker
  • Actions to take first
  • Ways to automate security protections
Technical scope — Cloud & deployment audit
  • IAM & least privilege
  • CI/CD & secrets
  • Cloud exposure
  • Kubernetes isolation
Discuss this audit — Cloud & deployment audit

Internal network audit

I check how far an attacker could get after gaining initial access to your network, and which protections limit their progress.

Who it helps

Organizations looking to assess the security of their internal network, accounts, and servers.

What you receive
  • Attack scenarios after initial access
  • Weak points that allow further access
  • A plan to reduce these risks
Technical scope — Internal network audit
  • Active Directory
  • Network segmentation
  • Lateral movement
  • Privilege escalation
Discuss this audit — Internal network audit

Training & workshops

Security awareness and hands-on technical sessions for different audiences.

Cybersecurity awareness

A day to understand common threats and learn how to respond to suspicious messages and requests.

Who it helps

Non-technical teams, exposed business units, and leadership.

Format

1 day, on-site or remote

What your team takes away

Stronger reflexes against phishing and social manipulation.

Discuss this training — Cybersecurity awareness

Training for technical teams

Guided exercises to understand vulnerabilities, improve secure development, and strengthen systems.

Who it helps

Developers, DevOps, and security teams.

Format

3 to 5 days, guided labs

What your team takes away

Stronger practices in secure development, vulnerability analysis, and system protection.

Discuss this training — Training for technical teams

Security challenges & simulations

Practical CTF (Capture the Flag) challenges that teach participants by solving security problems.

Who it helps

Schools, internal groups, and technical events.

Format

Custom, challenge-driven

What your team takes away

Hands-on scenarios to apply knowledge and practice problem solving.

Discuss this training — Security challenges & simulations

How does an engagement work?

For an audit or training, we agree on the objectives, content, and next steps together.

  1. First conversation

    You describe the objective, the systems or audience involved, and your constraints.

  2. Preparation

    We agree on the scope or program, access requirements, and schedule.

  3. Delivery

    I carry out the authorized tests or run the planned exercises.

  4. Review

    We review findings or learning outcomes and the next actions.

Explore my approach through my articles.

My guides and analysis explain testing methods, findings, and approaches to remediation.

Read the articles

What do you need help with?

Describe the audit or training objective and the constraints to account for.

  • Your goal: assess a system or train a team
  • The systems involved or the people to support
  • Your deadline and constraints
Contact me