Freelance services Security audits and training for your business. Web and API pentests, cloud and network audits, security awareness, and technical workshops. Each engagement starts with an agreed scope and objectives.
Contact me Security audits Before a launch or after a change, testing covers a scope defined and authorized with you.
Web application pentest I test your application for weaknesses that could allow unauthorized access or expose your customers’ data.
Who it helps Businesses with a SaaS product, customer portal, or business application before launch or an important milestone.
What you receive A summary for decision makers Findings your team can reproduce Fixes ranked by priorityTechnical scope — Web application pentest OWASP Top 10 Authentication & session Business logic Sensitive data Discuss this audit — Web application pentest API security audit I check the connections between your applications and services to identify misuse of access and insufficiently protected data.
Who it helps Businesses with mobile applications, public APIs, or connections to partner services.
What you receive An overview of identified risks Technical evidence of weaknesses Recommendations to strengthen protectionsTechnical scope — API security audit REST & GraphQL Object-level access Authorization Business-flow abuse Rate limiting Discuss this audit — API security audit Cloud & deployment audit I review access, configuration, and application deployment to identify what leaves your cloud environments exposed.
Who it helps Businesses using AWS, Azure, or Kubernetes that want to secure their infrastructure and deployments.
What you receive Possible access paths for an attacker Actions to take first Ways to automate security protectionsTechnical scope — Cloud & deployment audit IAM & least privilege CI/CD & secrets Cloud exposure Kubernetes isolation Discuss this audit — Cloud & deployment audit Internal network audit I check how far an attacker could get after gaining initial access to your network, and which protections limit their progress.
Who it helps Organizations looking to assess the security of their internal network, accounts, and servers.
What you receive Attack scenarios after initial access Weak points that allow further access A plan to reduce these risksTechnical scope — Internal network audit Active Directory Network segmentation Lateral movement Privilege escalation Discuss this audit — Internal network audit Training & workshops Security awareness and hands-on technical sessions for different audiences.
Cybersecurity awareness A day to understand common threats and learn how to respond to suspicious messages and requests.
Who it helps Non-technical teams, exposed business units, and leadership.
Format 1 day, on-site or remote
What your team takes away Stronger reflexes against phishing and social manipulation.
Discuss this training — Cybersecurity awareness Training for technical teams Guided exercises to understand vulnerabilities, improve secure development, and strengthen systems.
Who it helps Developers, DevOps, and security teams.
Format 3 to 5 days, guided labs
What your team takes away Stronger practices in secure development, vulnerability analysis, and system protection.
Discuss this training — Training for technical teams Security challenges & simulations Practical CTF (Capture the Flag) challenges that teach participants by solving security problems.
Who it helps Schools, internal groups, and technical events.
Format Custom, challenge-driven
What your team takes away Hands-on scenarios to apply knowledge and practice problem solving.
Discuss this training — Security challenges & simulations How does an engagement work? For an audit or training, we agree on the objectives, content, and next steps together.
1 First conversation You describe the objective, the systems or audience involved, and your constraints.
2 Preparation We agree on the scope or program, access requirements, and schedule.
3 Delivery I carry out the authorized tests or run the planned exercises.
4 Review We review findings or learning outcomes and the next actions.
Explore my approach through my articles. My guides and analysis explain testing methods, findings, and approaches to remediation.
Read the articles What do you need help with? Describe the audit or training objective and the constraints to account for.
Your goal: assess a system or train a team The systems involved or the people to support Your deadline and constraintsContact me