Tarik Mahamdi

Looking to test the security of your web applications or infrastructure before an attacker does?

I perform penetration tests and security audits for startups, SMEs, and IT consulting firms that want to identify their concrete vulnerabilities, not just tick a compliance box.

What I deliver with each mission:

A structured report in the firm's format: mission context, identified vulnerabilities with reproduction evidence, business impact scoring, and a prioritized remediation plan. You'll leave with an actionable document, not an automated scan.

My areas of expertise:

› Web & API Pentest (OWASP Top 10, fuzzing, application flow analysis)

› Internal/External Penetration Testing (Linux, Windows, Active Directory, Kerberos)

› Configuration review and exposed attack surface audit

› Detection setup (Elastic SIEM, correlation rules, alert triage)

Why work with me?

I don't just run tools: each mission follows a manual methodology supported by over 40 compromised machines on Hack The Box, 8 technical write-ups published, and daily practice in a lab environment. I founded auditsec.fr where I maintain active monitoring of current attack vectors and enable companies to test their web security.

Available for one-off missions as well as longer-term engagements. Let's discuss your scope, and I'll provide a free framing before starting.