Case Studies
Dive into my diverse range of projects, showcasing my expertise in software development, design, and dedication to delivering exceptional results.
Mobile Application Penetration Testing
Anonymized iOS and Android pentest of a digital-health app: insecure token storage, SSL-pinning bypass and hardcoded API key fixed before HIPAA-aligned launch.
Explore Case Study
Cloud Security Review
Anonymized AWS security review of a SaaS analytics estate: IAM privilege escalation, exposed Terraform state and public jump boxes fixed to CIS Benchmark.
Explore Case Study
Web Application Penetration Testing
Anonymized grey-box web app pentest of a FinTech platform: client-side price override, JWT alg none auth bypass and stored XSS in AI-assisted code fixed in CI.
Explore Case Study
AI & Machine Learning Pentesting
Anonymized AI/ML pentest of an autonomous LLM support agent: 1,840 adversarial prompts, prompt injection and RAG PII leaks fixed, jailbreak rate 38.2% to 0.4%.
Explore Case Study
Network Vulnerability Assessment & Pentesting
Anonymized internal and external network pentest of a post-merger OT/IT manufacturer: VPN foothold to AD domain admin, then segmentation and SMB signing fixes.
Explore Case Study
API Penetration Testing
Anonymized grey-box API pentest of 600+ logistics REST and GraphQL endpoints: BOLA manifest leak, GraphQL rate-limit bypass and blind SQL injection remediated.
Explore Case Study