//portfolio iyedsec.dev
//location Tunisia
iyedsec

<Benarif Iyed>

//security researcher & penetration tester

i'm iyed , an independent security researcher and penetration tester. i assess web, api and cloud for saas teams — rating a finding only after trying to disprove it, read-only by default, and shipping fixes a team can merge rather than a list of problems.

Iyedsec //independent security consultant

  • conduct authorized assessments of web applications, apis and aws infrastructure for saas and fintech teams, from reconnaissance through remediation.
  • findings span authentication and session flaws, ssrf, os command injection and cloud misconfiguration; each is validated read-only before it is reported, so no customer data is accessed or altered during testing.
  • deliverables include remediation pull requests with fix-verification traced through the patched code path, not a standalone findings list.