I started my career as a full-stack developer, building web applications with PHP, JavaScript, and Python. That experience gave me a deep understanding of how apps are built — and where they break. I eventually moved into offensive security, motivated by the realization that the same vulnerability patterns appear across frameworks, teams, and industries.
Today I run REDWULF as an independent consultancy. Every engagement is run by me personally — from the initial scoping through to the final report and debrief. No junior consultants, no subcontractors, no automated-only scans with a logo slapped on.
I specialize in SaaS and MVP security because these products are at the highest risk: they ship fast, handle customer data early, and often skip security review before launch. I've tested platforms handling protected medical data, processing financial transactions, powering gaming marketplaces, and integrating AI/LLM features.