Founder-led · Blaine, MN
Website repair and monthly care for Blaine, MN businesses. Authorized review when a product can be abused. Same operator, two paths.
Direct reply on fit, authorization, and next step.
Public work
Responsible disclosure, VDP, and bug bounty work. Names do not imply endorsement, affiliation, or a customer relationship.
The problem
A scanner PDF after the testing window has already closed.
A site nobody will touch, with unclear domain and hosting owners.
A finding the developer cannot replay on the real path.
Care that depends on whoever last remembered the passwords.
Named targets and written authorization before the work starts.
Behavior reproduced by hand, written so an owner can act.
Repair with a record of accounts, DNS, hosting, and recovery.
Monthly care on a defined rhythm, not a mystery.
Two paths
Security review and website care are different jobs. The first screen should say so.
01 / Application security
Founder-led review of web applications, APIs, mobile products, identity, and business logic. I map the surface, reproduce exploitable behavior, document the path, and verify the fix.
02 / Website repair & care
Broken WordPress, failed updates, missing backups, or a site nobody is comfortable touching. I diagnose, repair, document ownership, and keep it on a monthly website care subscription from Blaine, MN.
How it works
Named targets, roles, and exclusions in writing. No scanner queue. No weeks of theatre before the first real path.
Behavior reproduced by hand, with the affected boundary and practical impact intact so an owner can act.
Reported paths checked after remediation, including nearby bypasses.
If the surface is already clear
Each security review is scoped around the system, the users, and the decision that needs to be made. Website repair stays on its own path.
Hands-on review of the application paths that can produce unauthorized access, data exposure, account compromise, or workflow abuse.
Android and iOS testing that treats the client, APIs, identity systems, and connected workflows as one attack surface.
A focused review of what the public internet can reach and how identity, service, and configuration issues could form an attack path.
Selected writing
Read the work before deciding whether the approach is a fit.
Start a conversation
I will review the context, ask for only what is needed to scope the work, and be direct if it is not the right fit.
