● ~/salah/services — 04 / 05

What I do.

Practical work for teams that want to know where they stand — and what to fix first.

03 services
Remote · Rabat
02 / Process

Four steps, no surprises.

01

Scope & recon

We agree on targets, rules and written authorization. Then I map the attack surface.

02

Assess & exploit

Manual and automated testing to find what is really exploitable — not just what a scanner says.

03

Report & prioritize

A clear report: findings ranked by risk, proof of concept, and fixes your team can apply.

04

Harden & verify

I help apply the fixes, then re-test to confirm each issue is closed.

03 / FAQ

Good questions.

Are you available for internships or end-of-studies projects?
Yes — I am open to internships (PFE / stage) and research collaborations in 2026. The contact page has the fastest way to reach me.
Do you test systems without permission?
Never. Every assessment starts with a written scope and authorization. Ethical, legal testing is non-negotiable.
What do I receive at the end?
A report with an executive summary, technical findings ranked by CVSS, proof of concept and step-by-step remediation.
Can you work remotely?
Yes. Most assessments and reviews can be done remotely; I am based in Rabat, Morocco (GMT+1).
› Next step

Have a system worth protecting?