Bright Wilson

Penetration Tester (Ethical Hacker)

Humlebäck • Freelance

Aug 2026 - Present • 3 mos

I find security weaknesses in websites, web apps, and APIs by testing them the way a real attacker would, so they can be fixed before anyone exploits them. How I do it: Scope: I agree with the client on what to test and when, in writing. Recon: I map the target, its technologies, entry points, and exposed information. Scanning: I use tools like Nmap, Nessus, and Burp Suite to spot likely weaknesses. Manual exploitation: I confirm real vulnerabilities by hand (SQL injection, XSS, broken authentication, access control flaws), since scanners miss many of them. Reporting: I write a clear report with severity ratings, proof of concept, and fix steps. Re-test: I verify the fixes after the client applies them. I follow OWASP, PTES, and NIST standards and keep all work confidential.

Cybersecurity Consultant (Web & Application Security)

Nigel • Freelance

Oct 2026 - Oct 2026 • 0 mos

I help businesses secure their websites and apps by finding vulnerabilities, explaining the risks in plain language, and guiding their team through fixing them. How I do it: Assess: I review the application, its infrastructure, and its login and data flows to understand where the risk is. Test: I run vulnerability assessments and penetration tests using Burp Suite, Metasploit, OWASP ZAP, and custom scripts. Prioritize: I rank findings by business impact (Critical, High, Medium, Low) so you fix what matters first. Advise: I give developers practical remediation steps and secure coding recommendations. Verify: I re-test to confirm everything is closed. I work with startups, online stores, and growing companies that want strong security without the complexity.