Offensive security services

Penetration testing, source code audits and ethical hacking.

I find the vulnerabilities in your software before attackers do, and help you fix them. Manual, in-depth work for teams that need more than a scanner report.

Get in touch

Services

What I test

Penetration Testing

Your applications and infrastructure, tested from an attacker's point of view and well beyond what automated scanners find.

  • Web applications and APIs (REST, GraphQL, gRPC)
  • iOS and Android apps, including their backends
  • Authentication, authorization and session handling
  • Internet-facing infrastructure and network services

Source Code Audit

A line-by-line review for the vulnerabilities that black-box testing misses, each one traced to the exact location in your code.

  • C and C++: memory safety, integer handling, race conditions
  • Web backends: injection, deserialization, SSRF, access control
  • Cryptography, key management and secrets handling
  • Closed-source binaries through reverse engineering

Ethical Hacking

White-hat vulnerability research on your products and platforms, approached the way a determined attacker would.

  • Attack surface analysis of products and protocols
  • Reverse engineering of apps, firmware and protocols
  • Fuzzing of parsers, file formats and network inputs
  • Security research on mobile platforms and browsers

Approach

How an engagement works

  1. Scope

    We agree on targets, time frame and rules of engagement. Testing starts only once you have authorized it in writing.

  2. Test

    Manual, in-depth work backed by custom tooling. Critical issues reach you right away instead of waiting for the final report.

  3. Report

    A written report with a management summary and, for every finding, its severity, impact, steps to reproduce and a concrete fix.

  4. Retest

    Once your fixes are in, I verify them and confirm that each finding is actually closed.