Mihai I.

I test web applications, APIs, mobile apps and AI systems for vulnerabilities that expose sensitive data, bypass access controls or allow unauthorized actions. You receive reproducible findings, clear remediation guidance and a free retest after fixes. My background spans penetration testing, security research and application reverse engineering. My certifications include OSCE3 (OSWE, OSEP, OSED), OSCP, CWEE, COAE and CRTE. What I can help with: • Web and API penetration testing, including authentication, authorization, business logic and injection vulnerabilities. • Mobile application penetration testing for iOS and Android, covering local data storage, platform interactions, network communication, reverse engineering and backend APIs. • AI application and agent security testing, including prompt injection, sensitive data leakage, unsafe tool use and authorization weaknesses. • Internal and external network penetration testing. • Source code review to identify vulnerabilities and trace their root causes. Each assessment combines manual testing with targeted tooling and custom scripts. I examine how your application handles different users, roles and workflows, then validate findings to establish their practical impact. You receive: • An executive summary explaining the key risks. • Technical findings with evidence, reproduction steps and proof of concept where applicable. • Prioritized remediation guidance your developers can act on. • A free retest of reported findings after remediation. Before testing starts, we agree on scope, access requirements, deliverables and timelines. Critical findings are communicated during the engagement so your team can address them promptly.