I’m Maximus, a senior security consultant working across offensive security, penetration testing, red teaming and adversary simulation. My day-to-day work covers internal and external infrastructure, web applications, cloud environments, Active Directory, phishing and wider technical security assessments.
A lot of my work has also been around improving how assessments are delivered: refining methodologies, reporting and QA processes, building new service offerings, and creating tooling to make testing more consistent and efficient.
Outside work, I train Brazilian jiu-jitsu and spend a lot of time hiking and climbing mountains.
I also spend time researching vulnerabilities, red team tradecraft and attack techniques, and this site is mainly where I keep the write-ups and technical things I think are worth sharing.