Web Applications & APIs
OWASP Top 10 + API Security Top 10, business logic flaws, authentication bypasses, and full attack-chain simulation
Windows Thick Client / Native Desktop Apps
.NET, WPF, UWP, and other Windows-native application security assessments (leveraging 13+ years of .NET engineering experience)
Cloud Infrastructure Assessments
AWS, Azure, and GCP misconfiguration reviews, identity & access management, and cloud-specific attack paths
Android Mobile Applications
In-depth static + dynamic analysis, reverse engineering, and runtime exploitation
Supply Chain & Dependency Risk Assessments
Third-party library, MSP, and software/hardware supply chain threat modeling
System Hardening Reviews
Linux & Windows platform hardening and configuration reviews