Teodor-Paul Tonghioiu

Web application security testing

This is my main area of expertise. An insecure web platform might lead to a bad image hit for the company or loss of user and employee data. I perform methodology driven penetration testing combined with automated tools and techniques learned while hunting bugs.

Close Window

Mobile application security testing

As with web applications, mobile apps can hide some critical bugs that can compromise your company. Make sure your clients can safely browse your app and your company's data is safe.

Close Window

Network penetration testing

There are always some insecure endpoints in your company, if not today tomorrow for sure. Make sure no one outside your company can access those endpoints and if an attack arises from inside there will be minimal damage.

Close Window

Bug bounty hunting

I test the infrastructure of companies with public security programs. I enjoy being creative and researching the newest techniques for finding bugs for those companies, as commonly occurring bugs are usually already fixed. I advise any company who has the necessary budget to start a bug bounty program, first a private one with a few researchers and as the platform grows more secure, a public program.

Close Window

Source code analysis and API testing

If your company policy allows it, I can analyze the source code and API for security bugs. This allows me to find additional bugs compared to a black box penetration test over the internet.

Close Window

Cybersecurity training

I can teach your technical and non-technical staff about best practices in cybersecurity. I also advise on the implementation of those practices specifically for your infrastructure.

Close Window