- OWASP Top 10 manual testing
- Severity-ranked PDF report
- Business impact per finding
- Remediation guidance included
A breach costs more than a pentest.
I find the vulnerabilities in your systems before someone exploits them. Structured methodology, written deliverables, and a report your team can act on.
[ SERVICES ]
What I do
- BloodHound attack path mapping
- Credential attack simulation
- Domain privilege escalation PoC
- Written remediation roadmap
- Prompt injection (direct & indirect)
- LLM output & jailbreak testing
- AI data pipeline review
- OWASP LLM Top 10 coverage
- External & internal recon
- Vulnerability exploitation & PoC
- Lateral movement & segmentation check
- Exposed services inventory
All services include a free re-test after fixes are applied.
[ CASE STUDIES ]
Real engagements, real findings
SEO Injection & Malware Discovery
PHP backdoor serving casino content to Googlebot
Remote injection via attacker-controlled Cloudflare subdomain
Unrestricted file write — persistent server-side execution
All critical and high findings remediated. Re-test passed.
View redacted report →WordPress Intranet — Static Code Analysis
Hardcoded HR & payment API credentials — CVSS 9.8
JWT auth bypass via undefined secret key — CVSS 9.3
Stored XSS + path traversal in file handler
20 vulnerabilities documented. Client applied all remediations within 2 weeks.
View redacted report →Active SEO Spam Injection & Full Remediation
60 hidden divs — 51 gambling domains, undetected 2.5 months
3.8 GB backup publicly exposed — probable entry point
Admin credentials hardcoded in 13 places across codebase
All 9 findings remediated in a single session. 8/8 automated verification checks passed.
View redacted report →[ ABOUT ]
Background
I started as a full-stack developer. That background changes how I test — I know how applications are built, which means I know exactly where developers leave gaps.
My training covers the full offensive attack surface: web exploitation, Active Directory attacks, network pivoting, privilege escalation and post-exploitation techniques. I don't just find vulnerabilities — I explain why they exist, what a real attacker would do with them, and how to fix them correctly.
I work remotely with startups and SMBs across Latin America, the US and Europe. Fixed-price engagements, bilingual delivery, and a free re-test to confirm your fixes actually hold.
[ CERTIFICATIONS ]
Training & Experience
Completed
Web Penetration Tester
Penetration Tester
SOC Analyst
Junior Cybersecurity Analyst
Exams pending
View HTB Transcript →In Progress
Active Directory Pentesting Expert
Offensive AI Expert
Wi-Fi Pentesting Expert
[ HOW IT WORKS ]
Simple, end-to-end process
01
Scoping Call
Free 30-minute call to understand your environment, define targets and agree on rules of engagement. No commitment required.
02
Proposal & NDA
You receive a written proposal with scope, timeline, methodology and fixed price. NDA signed before any work begins.
03
Active Testing
Active testing phase. You get progress updates throughout. Any critical findings are reported immediately — no waiting for the final report.
04
Report & Re-test
Detailed PDF report with risk ratings, proof-of-concept and remediation steps. Free re-test included to verify fixes were applied correctly.
[ PRICING ]
Get an instant estimate
01
Choose your service
02
Environment parameters
Scope
Complexity
03
Testing type
Black-box
No prior knowledge of the target. Simulates a real external attacker. Ideal to test your defences from an adversarial perspective.
✓ Most common
Grey-box
Partial credentials or context provided. Simulates a compromised account or insider threat. Best coverage-to-cost ratio.
✓ Recommended
White-box
Full access + source code provided. Maximum depth and coverage. Best for thorough audits or when regulations require it.
✓ Most thorough
Selected service
Web App Pentest
Estimated range
$2,000
—
$5,000
USD
Scope
Small · 1–5 targets
Complexity
Standard
Testing
Black-box
Duration
1–2 weeks
Automated estimate only — not a binding quote.
A signed authorization agreement is required before any engagement begins.
[ FAQ ]
Common questions
Web app from $2,000 · Active Directory from $3,000 · Network from $2,000 · AI/LLM from $4,000. Use the pricing calculator above for an instant estimate, or book a free scoping call.
1–3 weeks from scoping call to final report. AI/LLM focused assessments can be delivered in 3–5 days. Timeline is fixed in the written proposal before any work begins.
Yes. A mutual NDA is signed before any scoping call or work begins. All findings and client data are kept strictly confidential and never shared with third parties.
Cost, focus, and direct access. As a LATAM-based independent tester, my rates are significantly lower than US/EU firms without sacrificing methodology or quality. You work directly with the person doing the testing — from scoping to final report.
I report it immediately — you don’t wait for the final report. Critical and high findings are communicated as soon as confirmed so your team can begin remediation while the engagement is still active.
Yes, free and no commitment. In 30 minutes we define your environment and agree on targets and rules of engagement. You receive a written proposal with a fixed price afterwards.
I hold CPTS, CDSA, CJCA and CWEE certifications from HTB Academy and rank in the Top 1% on Hack The Box with 702 machines pwned. All credentials are verifiable via my HTB profile.
[ SEND A MESSAGE ]