Martin N.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Hi, I’m Martin — a Principal Penetration Tester with over 13 years of hands-on experience (since 2011). I’ve delivered high-impact security assessments for clients ranging from innovative startups to global enterprises across the UK, Europe, East Asia, and the Middle East. My expertise spans the full spectrum of offensive security, including: • Web Application Penetration Testing • Mobile Application Penetration Testing • API Penetration Testing (REST, SOAP, GraphQL) • Thick Client & Desktop Application Testing • External & Internal Infrastructure Penetration Testing • Cloud Security Assessments (AWS, Azure, Office 365) • Red Team Operations & Simulated Phishing • Wireless Assessments, IoT Security, and Embedded Hardware • Server & Workstation Build Reviews • Mobile Device & MDM Testing • Network Device Security Reviews What sets me apart is my depth of experience combined with a relentless, methodical approach. As a Tigerscheme and CREST certified penetration tester, I stay at the forefront of evolving threats and techniques. I don’t just find vulnerabilities I provide clear, actionable insights that help organisations meaningfully strengthen their security posture. In addition to technical excellence, I’m a strong communicator who excels at translating complex findings into clear, business-relevant language. I work closely with clients to understand their unique risk landscape and deliver tailored testing programs that align with their objectives. I run a professional, focused penetration testing company and take great pride in the quality of our deliverables. All engagements include comprehensive, high-standard reports (example reports available upon request). I am also a Cyber Essentials and Cyber Essentials Plus Assessor and work with a recognised certification body. Top Rated on Upwork, I’m known for consistent quality, clear communication, and delivering real value. Whether you need infrastructure testing, web/mobile application assessments, API reviews, cloud configuration audits, or full Red Team exercises. I’m here to help you identify and mitigate risks before attackers do. Feel free to reach out, I would be happy to discuss how I can support your security needs.