About me

I've spent more than 15 years breaking into networks, applications, and cloud environments for organizations of every size. I've performed hundreds of penetration tests, written the reports auditors rely on, and helped companies fix the issues before they became incidents.

When you hire me, you're working directly with the person doing the testing. No sales engineer. No junior consultant. No account manager translating questions back and forth.

What I do

Every engagement follows the Penetration Testing Execution Standard (PTES) and combines hands-on testing with a carefully developed toolkit built from hundreds of assessments. Scanners help identify potential issues, but they don't tell the whole story. Every finding is manually validated, every report follows a consistent format, and every recommendation is designed to help you remediate risk, not overwhelm you with noise or assign a failing grade.

Why hire a human?

A penetration test shouldn't be judged by how many findings it generates. It should be judged by whether you understand your real risk and have a clear plan to reduce it.

Many firms now rely heavily on automation, running scanners and AI-assisted tooling across an environment before producing a report. Automation absolutely has a place, and I use it too. The difference is that it's supporting the assessment, not replacing it.

Every engagement includes:

• A PTES-based methodology that stands up to customer and auditor scrutiny.
• Manual validation of every finding. No scanner output pasted into a report.
• Real-world attack scenarios that evaluate how weaknesses combine, not just individual vulnerabilities.
• Clear, prioritized remediation guidance that's practical to implement.
• One experienced tester from scoping through retest. No handoffs or account managers.
• Fixed pricing with a remediation retest included.

The result is a defensible assessment, a practical remediation plan, and a fixed-price engagement that doesn't turn into weeks of consulting or surprise invoices.

How it works

The process is intentionally simple. Fill out the two-minute scoping questionnaire, and I'll send back a fixed scope and price. We schedule the testing window, I perform the assessment, deliver the report, and include a remediation retest so you can verify everything before your audit.