Cybersecurity: Penetration Testing & Secure Code
Find the weak points before attackers do—then fix them in the code, the data and the infrastructure.
I test and harden web applications, APIs, mobile apps and cloud setups: authorized penetration tests, secure code reviews, and encryption of data in transit and at rest. You get a prioritized report written for both engineers and management, and—unlike a test-only engagement—hands-on help fixing what was found, from code changes to key management and CI/CD security checks.
Who it's for
- Companies launching a product that handles customer or payment data
- Teams preparing for a customer security review, an audit or KVKK/GDPR compliance
- Startups without an in-house security engineer
- Businesses that suspect a vulnerability or recently had a security incident
What you get
- Scoping and written authorization before any test
- Penetration test of web apps, APIs, mobile apps or cloud configuration (OWASP-based)
- Secure code review of authentication, authorization, input handling and secrets
- Encryption design: TLS, data at rest, password hashing and key management
- Prioritized report with risk levels, evidence and concrete fixes
- Remediation support, a retest, and security checks in your CI/CD pipeline
Typical projects
Technologies
- OWASP Top 10 / ASVS
- Burp Suite
- OWASP ZAP
- Nmap
- SAST / DAST
- TLS
- AES / RSA
- KMS / Vault
- Kubernetes
- GCP
How we work
A simple, transparent process from first call to production.
- 01
Intro call
We talk about your goals, constraints and timeline. You get an honest first assessment.
- 02
Discovery & proposal
I analyse the problem, your existing systems and the options, then send a clear scope, roadmap and proposal.
- 03
Build in short iterations
Work happens in short sprints with regular demos, so you see progress early and can steer.
- 04
Launch & handover
Production rollout with monitoring, documentation and knowledge transfer to your team.
- 05
Grow
Optional ongoing support, optimization and advisory as your product and team grow.
Frequently asked questions
Do you only report problems, or also fix them?
Both. As a software architect I work directly with your engineers on the fixes—code changes, encryption, key management and pipeline checks—and then retest to confirm each issue is closed.
Let's talk about your project
Book a 30-minute intro call. You'll get honest first recommendations and a clear next step.
Other services
AI Agents & Automation
Customer support, sales and operations agents that work 24/7—connected to your own data.
DetailsFractional CTO & Technical Consulting
Senior technical leadership—without a full-time executive hire.
DetailsStartup Product Development: Idea to Scale
From idea validation and market research to MVP, launch and growth—end to end.
DetailsWeb & Mobile App Development
Fast, SEO-ready websites and cross-platform mobile apps with solid backends.
DetailsCloud, DevOps & Cost Optimization
Reliable infrastructure, automated deployments and a lower cloud bill.
DetailsMicroservices Architecture & Legacy Modernization
Turn fragile monoliths into stable, scalable systems—without a risky big-bang rewrite.
DetailsIoT Platform Development
Connect, monitor and manage thousands of devices from one secure platform.
DetailsDigital Transformation for SMEs
Digitize processes, connect your tools and get real-time reports—step by step.
Details