pwn.zone

Services

• Penetration testingWeb, API, mobile, network, cloud (AWS, GCP, Azure), and hardware.
• Red teaming & exploit developmentAdversary simulation, custom tooling, and 0-day research.
• Secure CI/CD & DevSecOpsPipeline hardening and security built into how you ship.
• Threat modeling & security reviewDesign and code review before launch, not after the incident.
• Reverse engineeringBinaries, firmware, protocols, and undocumented file formats.

Track record

• Major cloud providerPre-launch penetration testing of new services.
• Top-tier MSSP adversary groupRed team operations and 0-day development for large enterprise clients.
• Product security leadershipLed a DevSecOps team; owned secure CI/CD, vendor pentest engagements, and hardware testing.
• Global entertainment companyWeb, mobile, and RFID security for a large-scale guest platform.
• InfraGard memberSince its inception.

Security tooling

• OpenAPI-BifrostBurp Suite extension: parse OpenAPI specs into Scanner, Repeater, and Intruder, with an RBAC comparison grid.
• guzzleRapid 0-day discovery tooling, in Rust.
• rustydemonReverse-engineered explorer for Blizzard's undocumented CASC archive formats.
• yubituiCross-platform YubiKey management and automated provisioning.

AI & automation

• blenderwrightMCP server with 191 tools that lets AI agents drive Blender. 170+ stars.
• bad-ass-mcpCross-platform desktop GUI automation for AI agents on macOS, Windows, and Linux.
• hold-my-beerOrchestrates multiple LLMs as one team.

For fun

• rasterm3D graphics rendered in the terminal. That thing you never knew you needed.
• textual-rsA Rust TUI framework inspired by Python's Textual: CSS styling, reactive state, rich widgets.

Engagements

By referral.