Rayan D.

Cybersecurity pentester specializing in web, API, AI, and exposed surface penetration testing. I conduct offensive audits for SMEs with 10 to 100 employees to identify critical vulnerabilities before they become incidents.

My methodology follows OWASP (WSTG, API Top 10, LLM Top 10), PTES, and MITRE ATT&CK frameworks, with a manual approach focused on business logic and vulnerability chaining.

Specifically, I am involved in:

→ Web application pentesting (OWASP Top 10, business logic, SSRF, RCE, IDOR)

→ API penetration testing (REST/GraphQL: BOLA, BFLA, auth, rate-limit, secrets)

→ AI/LLM security audits (prompt injection, jailbreak, data leakage, agent autonomy)

→ SaaS testing (multi-tenant isolation, RBAC, cross-tenant)

→ Cloud & infrastructure pentesting (IAM configurations, exposure, CIS Benchmarks)

→ Mobile assessment (local storage, encrypted communications)

Delivery of a structured report including: executive summary for management, proof of concepts (PoCs) mapped to CWE/CVSS, prioritized remediation plan, business impact matrix (GDPR, NIS2, DORA), and re-test attestation.

Founder of Laucked, a French cybersecurity firm based in Toulouse. Each mission is carried out directly by the founders, without subcontracting, with a free initial surface diagnostic to prioritize risks.

Areas: SME/Mid-cap Cybersecurity, Application Security Audits, Consulting and Audits, E-commerce, Digital Enterprises, Digital and IT Services.

Languages: French (native), English (professional).