Patryk Kieszek

Web & API Pentester with an offensive, results-oriented approach.

Certified eJPT, ICCA, and ISO 27001 Internal Auditor, I conduct penetration tests targeting web applications, APIs, and SaaS environments under real-world conditions. I gained my experience as a pentester at NASK, the Polish national cybersecurity research institute, where I performed security assessments in production and contributed to vulnerability research that led to a CVE attribution.

Since then, I operate as a freelancer, undertaking commercial pentest missions and Bug Bounty programs on various platforms including HackerOne, with technical reports aligned with OWASP, ISO 27001, GDPR, and SOC 2 requirements. I am currently preparing for the CPTS (Hack The Box) and OSCP certifications.

Educated in both the humanities and code, I studied sociology at Sorbonne University before diving into ethical hacking. My technical foundations were strengthened by intensive training at 42 School in low-level programming - C, C++, Bash, and Python, enabling me to analyze systems in depth and understand business risk.

My approach is pragmatic and offensive: I seek exploitable vulnerabilities, assess their real business impact, and deliver concrete recommendations, accessible to all stakeholders.

I work in French, English, Spanish, and Polish, remotely or occasionally in person. If you are developing a high-potential solution, I can help make it more secure without unnecessary jargon.