What I do
Security services
Testing, advisory and training to find and fix security problems, from design to production.
Services
Security testing
Find what an attacker could exploit.
-
Web and API penetration testing
Manual testing of web applications and APIs, the way an attacker would approach them.
-
Cloud penetration testing (AWS)
Testing and configuration review of AWS environments: permissions, exposure and secrets.
-
Vulnerability assessment
A broad review of your exposure, with risks ranked so you know what to fix first.
-
Mobile penetration testing
Security testing of Android and iOS apps and the APIs behind them.
Advisory and training
Build security into how your team designs and writes software.
-
Secure code review
A review of your code to find vulnerabilities before they reach production.
-
Architecture review
Threat modeling and design review, before the decisions are expensive to change.
-
DevSecOps
Security built into your development process: pipelines, dependencies and secrets.
-
Security training
Hands-on secure development workshops for engineering teams.
Development
Backend built with security from day one.
- Through RyuLabs
Backend development
Services in Go on AWS, with security designed in. Through RyuLabs.
Have a system to test or review? Send me the scope
Tell me what you need tested (applications, APIs or environments), by when, and any constraints, and I'll reply with the next steps. I work in English and Spanish.
hello@santiagopassafiume.comLooking for development? Websites, applications and backend projects go through RyuLabs.