Application security,
done properly.
I’m Sander Vanrapenbusch. I find, explain and resolve software vulnerabilities. Because I understand how the technology actually works, I create remediations that hold up in the real world.
I started out hands-on as an application penetration tester and grew into leading roles: training, quality assurance, and managing a team that delivered around 300 security reports a year. Today I work as an application security expert within the automotive industry, building security into every new product and release. As I got a second degree as motorcycle technician, I am as comfortable with the machines as I am with the code and architecture.
“I explain complex technical problems in simple terms, and resolve them in the most pragmatic way.”
Application security review
Secure code review, threat modelling and architecture analysis to find the weaknesses before they ever reach production.
Penetration testing
Hands-on testing of applications and infrastructure to surface the issues that actually matter, and what they mean for the business.
SSDLC & DevSecOps
Embedding security into the development lifecycle, so vulnerabilities are caught early and resolved efficiently, not bolted on at the end.
Where the work meets the enthusiasm.
Cars are where my profession and my passion line up. I understand the specifics of the industry, from UN R155 type-approval to the practicalities of how a vehicle is actually built. And because I have a background as motorcycle technician, topics like keyless entry, CAN, electronics, immobilizers or even engine management aren’t abstractions to me: I know the hardware as well as the software.
