About
Take what is useful. Challenge the rest.Qui Audet Adipiscitur...Who Dares Wins
I lead an enterprise penetration-testing practice. The work has grown beyond the test itself, but I still want to know what a system actually did, why the evidence supports the conclusion, and whether another practitioner could challenge it.
That technical judgment has to hold across a team. My responsibility is to set direction, develop people, and make the practice useful to the engineers and leaders who have to act on its work.
My independent projects take the same curiosity into AI-assisted security and systems design.
My path
Building a practice without losing the craft.
A diagram can tell you how a system is supposed to behave. Hands-on testing taught me to find out what it actually does, then explain the difference in a way someone else can act on. Earlier work in databases and business intelligence taught me to look for the relationships between the system, its data, and the decision it supports.
Leading a practice means building that judgment beyond one person. The method, the people, and the follow-through around a test all have to work together. A validated result must reach the teams who can address it; a program has to make that path reliable without losing the technical detail that made the result worth acting on.
AI-assisted testing brings a new version of that challenge. An agent can explore quickly; the harder work is deciding what its candidates mean, which ones a person can validate, and how useful results enter an enterprise workflow. I am evaluating tools and operating approaches against those questions, not claiming the work is finished.
RobHunterLabs on GitHub is where I share the independent code and supporting artifacts behind selected field studies. This site is where I tell the story, including what changed my mind.