-- :: twitter | github | mastodon | bluesky | linkedin :: --
I spend my time as a professional attacker showing people the consequences of misusing and mishandling technology. I do this because I care about the way humans use technology, and I care even more about how it affects us.
Founder
Security Consultant, Red Team
Penetration Testing Practice Lead
Senior Penetration Tester
Penetration Tester
2024: The Human Element Is Not Your Punching Bag
2021: What Even Is a Pentest?
2023: From Checkbox to Checkmate: Winning the Game for Security Budgets
2022: Burnout Recovery and Prevention 101
2020: (Almost) Serverless Password Cracking, or How I Learned to Stop Worrying & Love AWS
2022: How to Attack Companies with No Buildings or Networks
OSCP | Offensive Security Certified Professional
GWAPT | GIAC Web Application Penetration Tester (expired)
CEH | EC-Council Certified Ethical Hacker (expired)
CompTIA Security+ce (expired)