Production security, built into the work
DevSecOps, application pentesting, and Python backends for product teams. Controls live in delivery and operations — next to the code.

Three ways to work with us
Pick a lane. Share the system and the outcome. We will propose the engagement.

DevSecOps
CI/CD, Linux, secrets, and the controls that belong next to the code.
Open service
Pentest & AppSec
Independent testing of web applications and APIs against the surface that is actually exposed.
Open service
Secure backend
Python services for production — APIs, authentication, and hardening of systems already in use.
Open serviceWhere the work sits
A single practice covering delivery, testing, and the services that have to stay up.
DevSecOps
- CI/CD security
- Linux and deployment
- Secrets and access
- Production hardening
Pentest & AppSec
- Web application pentest
- API security testing
- OWASP-focused review
- Coordinated disclosure
Backend
- Python (Django, Flask)
- REST APIs
- Authentication and access control
- Secure service development

Ophiron
Linux operations platform for monitoring, hardening, and day-to-day control of production hosts. Built and maintained under GlitchIdea.
From the practice
Longer notes on delivery, testing, and production engineering.

Backends that have to stay up
A Python service that authenticates users and holds data is part of the security story. Reliability, access control, and hardening belong in the same backlog as features.
Read article
Scope the attack surface you actually run
A useful pentest follows what is reachable — the web app, the APIs behind it, and the identity paths that bind them — not a generic checklist printed for a different product.
Read article
Security belongs in the pipeline
Release hardening is cheaper when access, secrets, and deploy paths live next to the code — not on a separate track after production is already live.
Read articleBrief the system. We will take it from there.
For a pentest, a DevSecOps engagement, or backend work, write with the environment and the outcome you need.
