I help teams find and fix security issues across web applications, blockchain systems, infrastructure, and compliance-heavy environments. My work sits close to real-world attack paths: offensive security, secure design reviews, tooling, and clear reporting that engineering teams can act on.

Outside client work, I build practical security tools used by the community, including Burp Suite extensions and WireSpy, which has been featured by Pentester Academy.

BurpGPT is a Burp Suite extension that brought LLM-assisted passive analysis into web security testing workflows early, before this became a common pattern in offensive tooling. It remains one of my most widely used public projects and reflects how I like to work: applying emerging technology where it creates practical security value.

_{Selected certifications. More available in the credential wallet.}

_{Selected from public repositories and day-to-day security work. More available across client work, research, and private tooling.}

"The net is vast and infinite."
_{Ghost in the Shell}