Direct technical collaboration for teams that need a careful assessment, a code review, or a better security workflow.
Manual assessment of application behavior, with particular attention to authentication, authorization, session handling, and business logic. Scope is agreed around your application, users, and environment.
Reviewing findings against the implementation so engineering teams can distinguish actionable issues from noise and understand what needs to change.
Internal and external assessments connecting exposed services, access boundaries, and configuration to the risks in your environment.
Custom tooling and engineering support for assessment, review, and reporting. My experience includes Python pipelines, JavaScript analysis, and the evaluation of LLM-assisted security systems.
Agree on the systems, objectives, access, boundaries, and deliverables before testing begins.
Perform the agreed assessment, validate observations, and communicate significant findings.
Explain the evidence, impact, and practical remediation priorities for the people responsible for the system.
Discuss the report with your team and validate remediation according to the agreed scope.
Tell me what you’re building and what you need assessed.