// about
Taking software apart since 2012
Other people's malware first, then the web, now the whole stack — including the servers this site runs on. The way here wasn't a degree, it's a documented trail.
// the path
- First malware analysis: a CS:GO "cheat" that wasn't one. The start of the documented trail.
- Reverse engineering RATs and C2 infrastructure, reported publicly. Own blog since around then.
- Cerber ransomware decryptor. Responsible disclosure to a local bank: worked through the PIN entropy math, shipped concrete fixes. Debian hardening writeups that live on in the homelab today.
- Founded Contegus — web development as the business entry. Astro, WordPress, SvelteKit, taking over and simplifying inherited stacks.
- Shift back to security and infrastructure. Less a pivot than a coming-out: the same DNA as 2012, now with my own infrastructure underneath.
// how i work
- Security / forensics
- Finding backdoors that scanners miss — documented since 2012. CVSS 10 writeup →
- Web engineering
- Astro with my own CSS framework, custom WordPress, SvelteKit — specialty: simplifying inherited stacks. projects →
- Infrastructure / DevOps
- Proxmox homelab, own git/CI stack, Ansible IaC, three-tier isolation. homelab →
- AI engineering
- Versioned agent skills as infrastructure, LLM out of the action path. marlin →
- Data / document pipelines
- SHA-256 dedup across 1,351 PDFs, own RAG pipelines, semantic search. dedup audit →
- SEO / GEO
- Technical SEO and measurable GEO baselines — the depth on that lives at Contegus. Contegus →
- Compliance / a11y
- GDPR audits, WCAG 2.2 AA as a quiet delivery standard, HIPAA review without assurances.
// contact
Client work runs through Contegus, my studio for web, SEO, and security. Until this site launches, that's also the shortest way to reach me.