I build it, I break it, I teach it.

I test your web application and APIs against real attack scenarios — OWASP Top 10 and beyond: authentication bypass, privilege escalation, SQL injection, XSS, SSRF, business-logic flaws and session management errors.

Static and dynamic analysis of iOS and Android apps under OWASP MASVS/MASTG: reverse-engineering resistance, insecure local storage, certificate pinning, root/jailbreak detection and backend communication.

I map your external and internal attack surface and exploit the weak points: exposed services, default credentials, unpatched systems, Active Directory misconfiguration and wireless security.

I measure the human layer. Controlled phishing, QR-trap and vishing campaigns built around your organisation, reported per department and closed out with awareness training.

I bring my academic IoT-security work into the field: firmware extraction and analysis, hardware interfaces (UART/JTAG), MQTT and BLE protocol security, and device-to-cloud communication.

Looking from inside the code to find what scanners miss: authorisation logic, cryptography misuse, leaked secrets, dependency-chain risk and CI/CD pipeline security.

iOS and Android apps from a single React Native / Expo codebase. From idea to App Store and Google Play release — including offline-first behaviour, on-device AI and store submission.

Fast, accessible, search-ready web applications built with Next.js and TypeScript — from marketing sites to dashboards and internal platforms, with Core Web Vitals and SEO planned from the start.

End-to-end type-safe, scalable and secure backends. Authentication, authorisation, rate limiting and audit logging come as standard, not as an afterthought.

Getting your site found on Google and inside generative engines (GEO) such as ChatGPT, Gemini and Perplexity: technical audit, structured data, canonical/hreflang hygiene and content architecture.

Machine learning, natural language processing and explainable AI (XAI) projects. Model accuracy matters, but so does why it decided that way — which is what makes it usable in an enterprise.

Dashboards that pull scattered data into a single decision screen — from choosing the right metrics to a visual language built for readability first.

Awareness programmes that land with non-technical teams too, drawn from eight-plus years of teaching. Built on live demos and real cases — not slide reading.

Product architecture, security roadmaps, technology selection and team mentoring — plus academic support for university–industry collaboration, joint publications and grant applications.