Mohamed Khalil G.

Overview: With several years of hands-on experience in offensive security and secure software delivery, I help businesses find and fix critical vulnerabilities before attackers do — and build the automation pipelines that keep them protected over time. I've conducted penetration tests across web applications, APIs, and network infrastructure for clients ranging from early-stage startups to enterprise environments. My engagements consistently surface high-impact findings — including authentication bypasses, privilege escalation chains, and exposed sensitive data — backed by detailed CVSS-scored reports and working proof-of-concept exploits. Beyond manual testing, I design and implement security automation: AI-assisted regression pipelines, and full DevSecOps integration with SAST/DAST tooling in Jenkins and GitHub Actions CI/CD environments. I'm fluent in both the attacker's mindset and the developer's workflow, which means my remediation guidance is practical and code-ready — not just theoretical. If you need a security partner who delivers actionable results, communicates clearly, and stays involved through fix verification, let's talk. Services: Web Application Pentesting — OWASP Top 10, SQLi, XSS, authentication flaws, session management API Security Testing — REST & GraphQL, authorization bypass, insecure endpoint analysis Network Pentesting — External/internal testing, privilege escalation, segmentation audits Test Automation — Playwright suites, AI-assisted test generation, regression pipelines DevSecOps Integration — SAST/DAST, Kubernetes security, secure CI/CD with Jenkins & GitHub Actions What you get: Detailed technical report with CVSS scoring and executive summary Working proof-of-concept exploits for all critical and high findings Remediation guidance with code examples tailored to your stack Free retest to verify fixes were applied correctly Pipeline integration for continuous, ongoing security coverage