Offensive security testing for web apps, mobile apps, APIs and networks. Real exploitation, clear reporting, and fixes your team can actually ship.
The logic flaws, broken authentication and access-control gaps that automated scanners walk straight past, found and proven across your apps and APIs.
Android and iOS tested end to end, from insecure storage and pinning bypass to the API abuse that lives behind the app.
External, internet-facing assessments that surface exposed services, weak configurations and the paths an attacker would use to get a foothold.
Every finding comes with a working proof of concept and the real impact behind it, never a severity guessed from a version banner.
Ranked among the top bug bounty hunters globally, with three published CVEs. The same instincts, pointed at your assets.
Clear enough for leadership to grasp the risk, precise enough for engineers to fix it, with a retest to prove it is closed.
A short call to agree targets, depth and rules of engagement. Fixed quote, no surprises.
Hands-on testing against your stack, chaining weaknesses the way an attacker would.
A clear writeup of what, how and impact, with exact fixes ranked by what matters most.
Once your team ships the fixes, I re-check every finding and confirm it is closed.
A page with one image and a disabled form turned into full account takeover in about an hour.
Read writeup →Two harmless IDORs on their own, chained into account takeover with no victim interaction.
Read writeup →A template injection hiding in a password reset email, turned into local file read.
Read writeup →Tell me what you want tested and I will come back with scope and a fixed quote, usually within a day.
Or email me directly