Pentesting and offensive security
Web audits, exposure review, controlled exploitation, retesting and actionable reports for technical teams.
Capabilities
A rare mix: real offense, product engineering and fast delivery.
This site is focused on concrete work: reducing risk, building maintainable products and accelerating delivery with AI without lowering the technical bar.
AI applications to production
Functional prototypes, full-stack delivery, AI model workflows, automation, security, deploy and real operation.
SaaS, DevOps and architecture
Platform design, integrations, pipelines, cloud infrastructure, performance and maintainability from the first release.
Hardening and technical review
Control validation, public surface, permissions, headers, rate limits, error handling and accidental exposure.
Products
SaaS products I build, ship and run.
Not slideware: real multi-tenant platforms live in production, with billing, authentication, tenant isolation and the same security discipline I apply on the offensive side.
EventTrack
In productionEvent venue management
Multi-tenant SaaS for event venues and planners: real-time agenda, leads, quotes, payments, contracts, staff and a client portal in one place, replacing spreadsheets and scattered chats.
VisualTrack
In productionClinical photo tracking
API-first SaaS for clinical and aesthetic professionals to document visual cases: before/after comparison, clinical views, a secure patient portal, agenda, PDF export and shareable links with strong tenant isolation.
Selected work
Other systems I built and put in production.
Custom platforms delivered end to end: product decisions, architecture, security and deploy. Some client work stays unnamed by agreement.
Love Hair
In productionE-commerce · professional hair care
Online store for professional hair colouring: catalogue with hundreds of shade variants, MercadoPago checkout, an automatic colour advisor that builds the full routine from real catalogue products, and an admin panel with audited stock and sales reports.
CEO Online
In productionProperty management platform
Platform for building and consortium administrators: expenses and settlements, payments and collections, suppliers, amenity bookings, reporting and a self-service portal for owners and tenants.
Confidential project
ConfidentialEnergy · fuel logistics
Internal dispatch coordination system: it ingests operational spreadsheets, groups the work by destination and automates the messaging with each delivery point, keeping status traceability across the whole run.
Pentest stats
Recent findings, clear and comparable.
The current pentesting statistics are preserved and displayed with a more direct read by severity, volume and context.
Listed pentests
Critical
High
Total findings
Global distribution
Critical, High, Medium and Low across all loaded results.
Writeups
Published research.
Public recommendations.
Secure contact
Tell me what you want to build, protect or validate.
The form uses server-side validation, CSRF, honeypot, time-trap and rate limiting. It does not publish your email or store the message in a database.
Useful first message
- What you need built, tested or improved.
- Current stack, environment and deadline.
- Security constraints or confidentiality requirements.