Freelancer profile translated to English.

Description

Are you developing a web application or API and want to ensure it can withstand attacks before going live?

I will test your systems like a real attacker would, following the OWASP Web and API Top 10 repositories.

Active researcher on private bug bounty programs for several years, I work for financial institutions, public organizations, and international companies. I identify concrete vulnerabilities: business logic flaws, broken access control, IDOR, SSRF, injections.

Each mission concludes with a detailed report, readable by both your developers and your management.

Coming from the railway industry where rigor and risk management are non-negotiable, I bring the same standard to every security mission.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

YesWeHack
Bug Bounty Hunter
CONSULTING AND AUDITS
October 2025 - Today (8 months)
Paris, France
Offensive security researcher specializing in web and API penetration testing, working on private bug bounty programs for medium and large international companies, financial institutions (banks, insurance), and French and European public organizations.

Identified and accepted vulnerabilities: IDOR/BOLA, SSRF, Server-Side Code Execution, Business Logic flaws, Improper Access Control, XSS.

Methodology based on OWASP API Top 10 and OWASP Web Top 10. Use of Burp Suite for analysis and detailed vulnerability reporting transmitted to the targeted organizations' security teams.
API Platform risk-and-vulnerability-assessment Cybersecurity API Web API