Projects
Case studies in security & automation.
A closer look at real systems — how a security weakness was found and responsibly reported, and how an automation platform was engineered to be auditable and dependable.
Projects
A closer look at real systems — how a security weakness was found and responsibly reported, and how an automation platform was engineered to be auditable and dependable.
Contributed to a production web platform and its security posture — finding, reporting, and helping remediate weaknesses in a live codebase.
Overview
As a junior developer at Looping Binary I worked across the product while taking ownership of its security posture — auditing authentication flows, input handling, and access control on a live platform, then reporting findings with reproduction steps and working with the team to ship fixes.
Looping Binary's platform was live and growing, which meant security work had to happen without disrupting real users. The goal was not a one-off pentest but an ongoing practice of finding, reporting, and closing weaknesses.
I mapped the application's trust boundaries first — where user input crosses into privileged operations — and worked outward from there: authentication, session handling, and authorization checks on sensitive endpoints.
Each finding was written up with a concrete reproduction, an impact assessment, and a suggested fix, so the team could prioritise by severity rather than guesswork.
The reported issues were remediated and verified. More importantly, the process established a repeatable loop: test, report, fix, re-test — the habit that keeps a product secure as it changes.