Penetration Tester · Sophos (ex-Secureworks)

Penetration Tester · Sophos (ex-Secureworks) · CISSP · OSCP · OSWE · OSEP

Hi. I work in offensive security. I prove what attackers can actually reach.

I am a penetration tester at Sophos (ex-Secureworks). Offensive security is my core practice. I also work deeply in cloud, AI, and business-aligned cybersecurity, with strong focus on AWS, Microsoft Entra ID, and Kubernetes and container environments. I deliver evidence-backed findings and remediations teams can act on.

Practice

Focus areas

Writing

Latest articles

Writing

Blog

Search 0 results

Comments

No account needed. Keep it constructive.

Secure access

Console sign-in

There is no public login link in the navigation. Open /login and sign in with the admin password.

Writing

Manage posts

Create, edit, and control visibility of blog posts

New post Live edit

Type # ## > ``` / ```mermaid [[toc]] ** ` - then space · markdown as you type · Preview fills TOC & Mermaid

0 words 0 chars ~1 min read Ready

Content

Categories

Organize the blog

Credentials

Manage About-page certifications. Upload a badge/icon image for each cert and set the public verify URL.

Icons are stored under assets/certs/ (PNG, JPG, WEBP, GIF, or SVG, max 2 MB). Changes appear on About → Credentials after save.

Blog categories

Group articles for filters and the editor. Deleting a category never deletes posts.

Comment moderation

New comments wait for approval unless you turn that off in Site settings. Rejected comments stay here until you delete them.

Loading…

View statistics

How many times each article was opened. Admin sessions are not counted. Repeat hits from the same IP within a minute are collapsed.

Article Views Unique IPs Last viewed
Loading…

Visitor log

Source IP and time for each recorded view. Times are stored in UTC.

Time (UTC) IP Article User-Agent
Loading…

Backup & restore

Snapshots live in data/backups/. Restore merges by default and never deletes existing posts. A pre-restore backup is created automatically.

Restore from uploaded JSON

Site settings

Public site copy and comments policy.

There is no Login button on the site — open /login and sign in with the admin password.

HTTPS / TLS

Certificate mode, file paths, and self-signed generation.

Loading TLS status…


            

            

              

                
                
              

              
              
              
              

                Paths are relative to the app root unless absolute. Config is saved immediately;
                the process must be restarted to load new cert files.
              

              
            

            

            

              
Generate self-signed certificate

              
              
              
              
              
Writes certs/selfsigned-cert.pem and certs/selfsigned-key.pem, then points config to them. Restart the server afterward.

            

          

        


        

          

            

              

                
Console password

                
Update the password used to sign in at /login.

              

            

            

              
              
              
            

          

        

          

        

      


      
      

        

          

            
Profile

            
About

          

          
        


        

        

          
          

            

              
              

                

                

                  Penetration Tester
                   · 
                  Sophos (ex-Secureworks)
                

                

                

                
                
              

            

            
          


          
          

            

              01
              

                
Who I am

              

            

            

          


          
          

            

              02
              

                
Focus pillars

              

            

            

              

            

          


          
          

            

              03
              

                
How I work

              

            

            

              

            

          


          
          

            

              04
              

                
Credentials

              

            

            

              

            

          


        

      


      
      

        

          

            
Reach out

            
Contact

          

          
        


        

        

        

          

            

              

                Channels
                
Links

              

            

            

          

          

            

              

                Message
                
Send a note

              

            

            

              
              
              
              
              
This form opens your mail client. There is no server backend.