$ █
I'm Björn, also known as z3r0dusk — a cybersecurity specialist with a deep focus on Application Security and Penetration Testing. My work centers on helping organizations understand their true risk exposure through hands-on, adversary-simulated assessments that go far beyond automated scanning.
Based in Sweden, I work with clients across Scandinavia and the broader European market. Whether it's a SaaS startup in Stockholm or an enterprise in Berlin, I bring the same level of precision and thoroughness to every engagement.
I believe security should be proactive, not reactive. Every assessment I deliver is built on a foundation of clear communication, actionable findings, and a genuine commitment to making the digital products we all rely on safer.
Beyond consulting, I build security tooling — including work in AI & LLM security testing, an area where traditional methodologies fall short and purpose-built approaches are essential.
01Rigorous security assessments for web applications, APIs, and mobile platforms. Manual code review, threat modeling, and vulnerability analysis aligned with OWASP methodologies.
02Adversary-simulated engagements that go beyond automated scanning. Manual exploitation and creative attack chains to validate your real-world risk exposure.
03Strategic security advisory covering governance, risk management, and compliance. Building lasting security postures through policy, awareness, and proactive threat intelligence.
Security awareness training delivered through our own platform — courses, certifications, and phishing simulations built for your team. Contact us for details →
Security assessments purpose-built for AI systems and language models. As AI becomes critical infrastructure, adversarial testing of these systems requires specialized methodology and tooling.
An AI-powered OSINT and threat intelligence platform built for security teams. Map attack surfaces, correlate threat data, and surface actionable findings — from a single interface.
Access Vector
Phase 01Define engagement parameters. Map the attack surface through intelligence gathering and passive enumeration.
Phase 02Systematic vulnerability identification through manual analysis, automated tooling, and creative exploration.
Phase 03Controlled, precise exploitation to validate severity and demonstrate real-world business impact.
Phase 04Clear, actionable deliverables — risk-ranked findings, proof-of-concept, and remediation guidance.
Have an application that needs hardening? I'd like to hear about it.
hello@z3r0dusk.se