I find real vulnerabilities in your APIs — BOLA, IDOR, authorization flaws — and teach your team to close them before release. Plus corporate training in test automation with Playwright, JavaScript and Jenkins. Everything is hands-on, built around real-world cases and common vulnerabilities — not dry theory.
Typical program budget: €3,000 — €15,000 depending on scope and timeline.
Pick one format or combine them into a program for your team.
I test your API the way an attacker would.
I teach developers and QA to catch vulnerabilities before release — using real-world API and web form examples.
Corporate training in test automation with Playwright, JavaScript and Jenkins.
The most common situations companies come with.
The product is growing, the API is open to clients and partners, but there has been no systematic security testing — or the last audit is badly outdated.
Regression does not cover critical flows, incidents hurt reputation and revenue, and the same root causes repeat release after release.
QA checks the happy path, developers do not know what BOLA or XSS looks like in their own code, and no one owns the process.
Tests are flaky, the pipeline is unstable, coverage is not growing — and releases keep falling back on manual work.
A transparent process without unnecessary bureaucracy. NDA — no problem.
Goals, team setup, tech stack, NDA and timeline constraints.
What you already have, where the bottlenecks are, which format gives the most value. We agree on scope and budget.
I run the audit or training in the agreed format: reports, checklists and materials stay with your team.
Report, fix plan, metrics. Follow-up support and next steps if needed.
A short call: we go through your context, pick the right format — audit, training or a mix — and agree on a budget range. If I’m not the right fit for your task, I’ll say so directly.
✉ vitali@brunovski.comPrefer email? Fill in the form below. I reply by email or messenger within one business day.