6+ years breaking applications ethically. 350+ pentests, 60+ code reviews across Web, API, Mobile & Thick Client platforms. Writing about what I find. Working at Societe Generale & previously SISA Information Security.