David Soria

I aim to make information security accessible to everyone.

I tend to invert the usual approach of "we have 3k, we need a pentest" to "you have 3k, tell me about what you do, and we'll see how best to spend it on security".

Indeed, security must be approached from the right angle, and penetration testing is not always the best way to start (if you haven't reached that level of maturity yet, you risk ending up with a dense report of 200 vulnerabilities all linked to a single problem).

Therefore, I seek to continuously support companies with their security challenges. Sometimes it's necessary to perform a pentest, sometimes to implement a process, and other times to design "security by design" architectures.