Hey! I'm a penetration tester with 3+ years of experience finding security holes — not to cause trouble, but to help close them before someone else finds them first.
I started out in bug bounty programs, which is a different kind of school: nobody pays you for a nice-looking report, only for real findings. That's where I sharpened my instincts and learned to spot what others miss. Alongside that, I've taken part in cyber range exercises like 365 Standoff — live infrastructure, real-time pressure, other competitors chasing the same targets. It trains a completely different kind of speed and thinking that no course can teach you.
I'm also a co-owner of my own project, phntm.tech, a security scanner. So I don't just hunt vulnerabilities by hand — I also understand how the automation side works from the inside. That gives me a wider view: I see what a scanner will catch, and just as important, what it never will. That gap is where the real risk (and the real fun) is.
What I do:
— Web application pentesting (OWASP Top 10 and beyond)
— Finding logic-based vulnerabilities that automated tools miss
— Working under tight deadlines on live systems
— Clear, no-fluff reports with reproduction steps and fix recommendations
I believe in honest work: if I say I found something, I'll show you exactly how to reproduce it. If I don't know something, I'll say so instead of stalling with fancy words.
Open to one-off projects and long-term collaboration. Feel free to reach out — let's discuss your task.
