Anaël M.

Newly graduated cybersecurity engineer from ENSIBS, I have proven experience in Web pentesting and security auditing.

My daily work involves performing security tests on web applications, whether through missions or bug bounty.

I possess powerful web pentesting tools developed over the years, capable of accurately and efficiently finding vulnerabilities among the OWASP Top 10 and more, optimized to avoid overloading your applications.

Regarding my experience, I spend most of my time scrutinizing vulnerability exploitation techniques, attempting to reproduce them on specially created applications, and thus continuously improving myself.

I have also accumulated significant experience by completing a large number of challenges and tests in this field.

I offer to bring a fresh perspective to the security of your web applications and to verify together that there are no major risks to your systems.

My work method is structured as follows:

1) Definition of the target to audit, the main contact, then signing of administrative documents;

2) On the agreed date, an email indicating the start of the tests is sent;

3) At the end of the test period, you will receive a very detailed report of vulnerabilities with recommendations to fix the detected flaws, and a simple procedure for your developers to reproduce the exploitation of vulnerabilities and test potential fixes;

4?) A video conference to present the results is possible upon request;

5?) In the event that numerous flaws are detected, a counter-audit is often judicious, and can be added as a contract extension.

My links and usernames:

Root-me (Security challenges platform): Sicarius

Hackerone (Bug Bounty platform): Sicarius

OSCP: In progress :D

Looking forward to discussing it with you.