Penetration testing for web applications and APIs
Realistic testing of technical attack paths with clear risk ratings and prioritised recommendations.
View serviceIT-Security Consulting
Services
I provide support where applications, development processes or security decisions need to be reliably tested and improved.
Focus
Core services
Secure development and security reviews
Make security decisions earlier in the development process without unnecessarily blocking releases.
View service
Developer security training
Training and workshops based on real technologies, findings and project risks.
View serviceProcedure and results
At the beginning I clarify the goal, scope, roles, approvals and the desired decision-making needs. During implementation, I coordinate relevant findings with the responsible people and report critical risks at an early stage. At the end you will receive comprehensible findings, clear priorities and concrete next steps for development and management.
I test mobile applications and selected infrastructure according to scope and project requirements as a supplement to a suitable penetration test.
View the complete engagement process. The synthetic sample report gives a concrete impression of the deliverable.
Partner model
Collaboration as a partner or subcontractor
For consulting engagements and technical assessments, I take on clearly defined tasks with agreed roles, authorisations and communication channels.
For consultancies and insurers
Technical testing, evidence assessment and white label support with clearly defined responsibilities.
View partnership optionsAdditional services
Additional services
These services complement my core offering where they meaningfully support a specific security objective.
Bug Bounty and Vulnerability Disclosure
Triage, technical assessment and clear processes for external security reports.
View service