Luka M.

I love breaking software. Then I write up exactly how I did it, so you can fix it before your users or attackers find it. QA Engineer and security tester with 5+ years of experience across web, desktop, and mobile apps. I'm ISTQB certified, and I've recently worked on cybersecurity tools, a full VPN security assessment, and AI SaaS platforms. I test like a user, think like a developer, and report like a pro. WHAT I OFFER Security testing - Web and API testing against the OWASP Top 10 - Mobile app analysis (APK decompiling, traffic inspection, insecure storage) - Reviewing production code, network logs, and database exposure for data leakage that shouldn't reach an end user and could harm your business - Reports with severity ratings, evidence, and steps to reproduce AI-based system testing - Test strategy for ML/LLM features: output quality, edge cases, prompt handling, and data-exposure risks QA and automation - Manual and exploratory testing on real devices - Automation in Playwright or Selenium with Python or JavaScript, run in GitHub Actions or GitLab CI - API testing (Postman, APIDog) and performance testing (JMeter, k6) HOW I REPORT Every finding comes with steps to reproduce, screenshots or video, business impact, and a suggested fix, so your developers can act on it right away. DEVICES (serials available for verification) - MacBook Air M4, macOS Tahoe 26.4 (Serial: D695WV20FM) - iPhone 16e, iOS 26.6.1 (Serial: DVX707JKMQ) - Windows 10 and 11 PCs, plus various Android phones TOOLS Security: OWASP ZAP, BurpSuite, Nessus, Yaazhini, Fiddler, nuclei, wapiti Mobile: Appium, Espresso, APK extractors, JADX, Android Studio, iMazing API & integration: Postman, Citrus, SoapUI, ApiDog Web UI & browser: Playwright, Selenium, Cypress, WebdriverIO Unit & framework: JUnit, pytest, TestNG, Visual Studio Performance & load: Apache JMeter, k6 BDD & test design: Cucumber, Jasmine Mocking & service virtualisation: WireMock, Mockito Test management: TestRail, Zephyr, Jira, Notion, Linear, ClickUp CI/CD & version control: GitHub Actions, GitLab CI, GitHub, GitLab Environment & monitoring: Docker, Sentry Database & data validation: SSMS, DBeaver, Sanity .io Cross-platform: Sauce Labs, LambdaTest Security testing is only performed on systems I'm explicitly authorized to test.