Secure code reviews
A close look at your code for vulnerabilities, with findings ranked by real risk and concrete steps to fix them.
Find the weak spots before someone else does.
I review code and infrastructure for security problems, explain what I find in plain language, and help get the fixes done. A report on its own does not make anything safer.
What I can help with
Application and API security
Authentication, access control, input handling and rate limiting, based on OWASP best practices.
Server hardening
Reducing what an attacker can reach, with automated patching, intrusion detection and compliance checks.
Encryption
Protecting sensitive data across your application, including managing the keys properly.
You might need this when
- A customer or auditor has asked how you handle security.
- You process personal or otherwise sensitive data.
- You are about to launch and want a second pair of eyes first.
- Nobody has looked at the security of your application in a while.
Past work
Secure server management
More than 25 Linux production servers kept safe with automated patching, hardening and intrusion detection.
User-level data encryption
Protecting sensitive data across application layers, including key management.
Security code reviews
Finding vulnerabilities and delivering reports with concrete remediation steps.
Central Elasticsearch environment
Tracking and analysing data across applications, with automated ingestion and dashboards.
Have something in mind?
Send a short description of what you need. I usually reply within 1 to 2 business days.
Get in touch