Dannpl

Security Audit & Consulting

What I do

Security auditing and penetration testing for web applications, APIs, and platforms. Fullstack development for teams that need something built right. I work across both sides. When I audit I know where developers cut corners, and when I build I know what an attacker looks for first.

On the security side: auth flows, session management, IDOR, injection, insecure design, API token handling, rate limiting, data exposure across integrations. The vulnerabilities that don't show up in scanners: race conditions, state manipulation, financial logic flaws. Especially relevant for fintech and betting operators. Threat modeling when you need to understand the full picture before you start fixing things.

On the development side: web3 contracts (Solana), dashboards, data pipelines, trading interfaces, back-office tooling. Architecture and code review for teams that need an outside perspective on a system they've been too close to for too long.

How it works

01
Scoping
We agree on targets, access level, rules of engagement, and timeline. You can define the scope or leave it open. I will prioritize the highest-risk surface.
02
Security review
Manual testing first. Automated tools find noise; I look for logic. I trace data paths, abuse business rules, and look for what the code assumes cannot happen.
03
Interim report
Halfway through you get a draft with findings so far. Start remediating early, redirect focus, or bring engineers into the loop before the audit ends.
04
Remediation
After your team fixes the critical issues, I review the changes to confirm the vulnerability is fully resolved, not just patched over.
05
Final report
Every finding, reproduction steps, impact analysis, and remediation guidance. Publishable if you want. Open disclosure builds trust.

Pricing

Fixed-price per engagement. Rate depends on scope and complexity. No retainers, no hourly billing. A clear scope and a clear number.

Get in touch

Describe what you need, what the system is, what you want reviewed or built, and your timeline. I will respond within two business days.

me@dannpl.com