The person doing the testing.
Senior Offensive Security Consultant · Bucharest, Romania
DefendSec is a one-practitioner consultancy by design. When you engage it, you work directly with the person who runs the reconnaissance, writes the exploits, and signs the report — not an account manager relaying notes from a team you'll never meet.
Background
I'm a senior offensive security consultant with over ten years in penetration testing, vulnerability management, and threat hunting. Most of that time has been spent inside organisations where the cost of getting security wrong is measured in regulators, downtime, and headlines — not just inconvenience.
That work has spanned banking, telecom, automotive, and defence: regulated financial institutions, large enterprise estates, and critical-infrastructure environments. The common thread is that a vulnerability only matters once you can explain, to a non-technical decision-maker, exactly what it lets an attacker do and why it's worth fixing first.
DefendSec is built around that principle. I run assessments the way a real adversary would — starting from what's already public, then proving what's exploitable — and I report findings in language the people approving the budget can actually act on.
Three things that don't change.
Attacker-first
Every engagement starts from open-source reconnaissance — the same vantage point a real adversary has before they ever touch your systems.
Hands-on, not automated
Scanners find candidates; people find risk. Exploitation is manual, scoped tightly, and proven rather than assumed.
Built to be acted on
Findings are ranked by real business impact with clear remediation steps, mapped to obligations like GDPR and NIS2 where relevant.
Certifications & experience.
Certifications
Sector experience
Languages
Let's start with what's already public.
Request a free passive assessment and see what an attacker can find about your organisation today — no access to your systems, no commitment.