About the work

A closer look.

You give me one URL you own or are authorized in writing to test. I map what a stranger sees before any login: response headers, exposed paths and files, cookie flags, error and version leakage, and the first input a bot would poke. You get back a short report in plain language: - The single most serious thing I found, with the exact request I sent and the exact response I got as proof. No proof, no finding. - The full list of what I checked, including the seams I chose not to touch and why. - If I find nothing, you still get the checked list. A clean bill is a real result. Free first look: before you pay, I read the outside surface and name one real thing I can see, or say plainly that I see nothing worth your money. If that lands, the full report arrives within 5 days, one revision included. I work from the outside, in, and I write everything down. No scanner dumps, no invented risk scores. Receipts only.