Homemade Security
Homemade Security is the codename of my freelancing project under which I deliver the following services:
🕷️ Web Application Penetration Test - Identify vulnerabilities in web apps, including OWASP Top 10 risks, auth flaws, API weaknesses, and more. Deliverables: detailed report with prioritized findings, proof-of-concept exploits, and remediation guidance.
🧱 External and Internal Network Penetration Test - Test network security from outside or inside perspectives. Identify misconfigurations, vulnerable services, lateral movement paths, and data exposure. Deliverables: detailed report with prioritized findings, proof-of-concept exploits, and remediation guidance.
📱 Mobile Application Penetration Test (Android) - Assess Android apps for security risks, including static/dynamic analysis, API testing, auth and data storage checks. Deliverables: detailed report with prioritized findings, proof-of-concept exploits, and remediation guidance.
👨💻 Security Engineering Consulting (secure software, remediation guidance, threat modelling, …) - Advisory services to strengthen software and system security. Includes secure coding guidance, threat modeling, risk assessment, and remediation strategies tailored to teams or processes.
📖 Security Training - Custom workshops to improve team skills and embed security into workflows. Topics: secure coding, vulnerability awareness, threat modeling, and more.
I have helped small and large clients across multiple industries:
- Uncover hidden vulnerabilities before attackers do
- Ensure apps meet security standards and prevent data leaks
- Integrate security into the development process
- Train teams to build and maintain secure software
My experience includes working with pentesting companies, universities, and as a Security Engineer currently for the world’s largest online betting company. I hold the following certifications:
- OffSec Web Expert (OSWE)
- OffSec Experienced Penetration Tester (OSEP)
- OffSec Certified Professional (OSCP)
- OffSec Wireless Professional (OSWP)
- AWS Certified Security - Specialty
- Burp Suite Certified Practitioner
Email or message me on LinkedIn for more details. Full CV available upon request.
