I find the security gaps in your business before someone with bad intentions does. I test web applications, networks, cloud, and Active Directory, then hand your leadership and your engineers one clear report they can both act on. Remote, worldwide, professional from the first call to the final fix.
A free, passive scan of your public attack surface — the same signals I check first on every real engagement, before any active testing begins. No login, no exploitation: just what's already visible to anyone looking.
Checks run: DNS & email-auth records (SPF/DMARC) · TLS configuration & certificate · HTTP security headers · certificate-transparency subdomain exposure. Every check here is passive — the same requests a browser makes just visiting the site. Please only scan domains you're authorised to test.
Nothing here required credentials or exploitation to find — which is exactly why it's worth fixing before someone else finds it first.
This is the view from outside. A full engagement gets you the view from inside — where the real risk in most environments actually lives.
I have spent 6+ years in cybersecurity, the last two focused entirely on offensive work, finding the paths attackers use before they do.
I run web application, network, and Active Directory penetration tests for clients across the UK, Europe, and the Middle East. Whether it is a single web app or a full corporate network, I find the weak points, prove the real impact safely, and show your team exactly how to close them.
Before offensive security I worked as a Detection Engineer and CTI analyst, writing the rules meant to catch people like me. That background is my edge: I know how alerts fire, so I test the way a real intruder would, and my reports speak to the blue team, not past them.
I am also a published security researcher on phishing tradecraft and trusted-infrastructure abuse, and I hold OSCP+, eCPPT, eWPT, eCIR and three Microsoft security certifications. My university background is in Network Engineering and Security, so the infrastructure I test is infrastructure I understand from the ground up.
I test the whole picture: web applications, networks, identity, and cloud, then report it so your leadership and your engineers both know exactly what to fix. A background in detection engineering means I test the way real attackers move, not just run a scanner.
Remote work for clients worldwide. Every engagement is scoped in writing with a fixed price and timeline before it starts.
Full-scope internal and external network assessments, Active Directory attack-path analysis, and web application testing for enterprise clients.
Turn raw findings into a polished, client-ready report. Executive summaries, risk-rated findings, and remediation your engineers can act on.
One-to-one mentorship for OSCP candidates from someone who passed OSCP+ and does this work for a living. I know what the exam expects.
On-demand offensive security expertise for startups and SMEs who need senior guidance without a full-time hire.
Custom detection rules in Microsoft Sentinel using KQL, mapped to MITRE ATT&CK, plus threat hunting and advisory writing.
No surprises, no hidden costs. You know the scope, the price, and the timeline before anything begins.
A free 30-minute call to understand your environment, goals, and any compliance drivers. No commitment.
A clear scope, timeline, and fixed price within 24 hours. You know the exact cost upfront.
The assessment runs remotely with minimal disruption and progress updates throughout. Never left in the dark.
A professional report with executive summary, CVSS-rated findings, evidence, and a remediation roadmap, walked through with your team.
Every credential links to its official verification page. View the full credential wallet →
Research on phishing tradecraft, trusted-infrastructure abuse, and the techniques attackers actually use in the wild.
How SVG files are abused as a phishing vector, the attacker tradecraft behind it, and the detection strategies that catch it.
21 Jul 2025Read ↗Infrastructure abuseTrusted-platform abuse using Apple's iCloud Calendar to deliver phishing that slips past standard email security controls.
11 Sep 2025Read ↗Campaign analysisThreat intelligence on large-scale phishing campaigns using country-code TLDs to evade detection and reach global targets.
23 Jul 2025Read ↗It depends on scope and environment size. Web application tests typically start from $500. Full internal network and Active Directory assessments start from $1,500. Every engagement gets a free scoping call and a fixed-price proposal with no hidden fees.
Yes, 100% remote. I work with clients in the UK, Europe, the Middle East, and worldwide. My time zone is GMT+3 and I adjust hours to match yours.
A web application test is typically 3 to 5 business days. A full internal network and Active Directory assessment is 5 to 10 days depending on scope. Every proposal states a precise timeline before work begins.
A professional PDF with two audiences in mind: an executive summary in plain language for management, and a full technical section for your engineers with CVSS-rated findings, screenshots as evidence, and a prioritised remediation roadmap.
Always. Every engagement starts with a mutual NDA and a signed rules-of-engagement document defining scope, timeline, and legal authorisation. Your legal protection comes first.
An assessment of your Windows domain for real attack paths: ADCS misconfigurations (ESC1 to ESC8), Kerberoasting, Pass-the-Hash, ACL abuse, and lateral movement. Most corporate breaches go through Active Directory, so this test finds those paths before attackers do.
Read the complete professional history, or take it with you.
Available for remote freelance engagements. I reply within 24 hours.
Prefer email or have something to say first? That works too:
A penetration test, a report written, OSCP coaching, or a translation. Send a short note and I will come back with a clear scope and timeline.
