"Kaeden provided exceptional insight into our application's security posture. Her testing was thorough, well-documented, and focused on real-world attack vectors rather than theoretical issues. Communication was clear throughout the process, and the final report gave our engineering team actionable steps to immediately improve security. Highly recommended."
I find the security flaws that automated scanners and big pentest firms miss. Manual testing by a neurodivergent brain that sees patterns others don't.
Got Vulnerabilities?
What You Get
Automated scanners only find what's obvious; real vulnerabilities live in custom business logic, fragmented APIs, and overlooked infrastructure. When you work with me, you get hands-on, adversarial testing designed to uncover how an attacker would actually break your systems—backed by actionable remediation guidance and dev support to ensure these fixes stick.
Manual Security
Testing
Not a scanner report. I manually test your APIs, authentication, authorization, and business logic by hand. I find IDORs, auth bypasses, and broken access control that automated tools will never catch.
Detailed
Reports
Every vulnerability documented with reproduction steps, severity ratings, and clear remediation guidance. Written so your developers can fix it and your executives can understand the risk.
Dev Team
Support
I walk your developers through every finding and make sure fixes actually work. Retesting included, because "the agency says it's fixed" doesn't mean it's fixed.
Web, API
& Mobile
Web applications, REST and GraphQL APIs, mobile apps (iOS and Android), Firebase and Supabase backends, OAuth implementations, and more.
Physical Device
& Kiosks
Android kiosks, locked-down tablets, POS systems, smart devices, vending machines. I break out of kiosk modes, find debug ports, extract firmware, and look for hardcoded credentials and backdoors. If it runs Android, I can tear it apart.
Network & Wi-Fi
Segmentation
Guest Wi-Fi, retail networks, lobby hotspots, public access points. I test whether your guest networks are actually isolated from internal systems, and whether someone on your guest Wi-Fi could send emails that pass your domain's SPF checks. Even Fortune 500 companies get this wrong. All I need is a tunnel to your guest network and I can test remotely.
Monthly
Retainers
Pre-buy a set number of hours each month. I test new features before they go live, review code changes, and stay on call for your team. Security isn't a one-time thing, and neither am I.
Flexible Scope
& Pricing
Every engagement is scoped to your needs. From a focused API review to a full platform audit to an ongoing retainer. Reach out and I'll put together a proposal that fits your budget.
Why Hire Me?
My neurodivergent brain doesn't work the way most people's does. I hyperfocus. I see patterns. I test edge cases that neurotypical testers skip because they "don't seem likely." That's exactly where the vulnerabilities are. I've found critical vulnerabilities in companies that had just passed pentests from big firms. The firms ran their scanners and left. I sat with the application, understood its logic, and found what they missed. Big pentest firms charge tens of thousands and give you a basic automated scan with a cover page. I find more, because I actually test your application by hand.
Vulnerabilities
Disclosed
Response
Time
Manual
Testing
Paid
Engagements
Who Have I Helped?
Some of the companies I'm trusted by & have found vulnerabilities for
-
OpenAI
-
Walmart
-
BMW
-
YouTube
-
Universal / NBCUNI
-
Sony
-
Paramount
-
Red Bull
-
Morgan & Morgan
-
Dhar Mann
The Feedback
Here’s what the teams and companies I’ve tested for actually had to say.
GamerSupps Team
The Leading Gaming Supplement Brand
Owned by jschlatt & SMii7Y, One of YouTube's Most Active Sponsors
Austin Long
CEO @ youtooz.com
$40M+ Revenue, Licensed with Disney, Paramount, NBCUniversal, MrBeast & More
"Kaeden was great to work with. She was responsive, detailed and thorough in helping us identify blindspots in web security. I'd recommend Kaeden to anyone looking for a cyber security consultant!"
Sudhir Yadav
Process & Automation Lead @ Dhar Mann
YouTube Channel with 25M+ Subscribers
"Kaeden is an amazing professional she demonstrated great abilities and skills to pen test our application and provided with full disclosure of the issues. She acted very professionally and with great sense of responsibility when disclosing sensitive vulnerabilities with our app."
Marko Šćulec
Head of Digital Solutions @ LELO
One of the World's Biggest Adult Toy Companies, Sold in 50+ Countries
"I had the pleasure of working with Kaeden, and I can confidently say she did an outstanding job helping our team identify and manage critical security patches. Her attention to detail and proactive approach ensured that vulnerabilities were caught early and addressed efficiently. Kaeden consistently demonstrated strong analytical skills, clear communication, and a solid understanding of security best practices. She didn't just flag issues — she took the time to explain risks, recommend practical solutions, and follow through to make sure patches were implemented correctly."
Leonhard Soenke
CEO @ throne.com
Privacy-First Gifting Platform with 1M+ Creators
"Kaeden did great work pentesting our application. Her creative approach and knowledge of vulnerabilities most accurately resembles the threats modern applications actually face. Would highly recommend."
Yuma Noma
CEO @ sango-tech.com
Tokyo-Based Product Studio with 3M+ App Users
"Kaeden reached out us with suggestions for cybersecurity improvement. It was amazing because we could not reproduce same bug without her detailed explanations. I believe Kaeden has deep understanding for cybersecurity."