The pilot never reaches production
The demo works, but quality, permissions, cost or operations are still unresolved.
See the relevant support →Available for selected projectsBER · REMOTE
Freelancer for AI, Laravel & IT Security · Berlin
AI products.
Laravel platforms.
Built securely.
I help teams deliver AI products, complex Laravel systems and security-critical releases. One accountable partner combines rapid implementation, scalable architecture and an offensive security researcher’s perspective.
Development
since 2004Production
dozens of platformsSecurity
public evidence
since 2004Production
dozens of platformsSecurity
public evidence
01 / INTELLIGENCEApplied AIModels · RAG · agents
02 / ARCHITECTURELaravel SystemsArchitecture · platforms
03 / OFFENSIVEWeb SecurityTests · reviews · findings
THREE DISCIPLINES
ModernScalableSecure
One partner. One complete technical picture.
Selected companies from development and security research
STRÖERGIGAKAS BANKTONERPARTNERSYNACK RED TEAMDEUTSCHE MEDIENPORTALE
DS / ENGINEERING THESIS
A product is not finished until it works, scales and withstands an attack.
- 01BuildLaravel creates a clear, testable product foundation.
- 02AugmentAI accelerates work and enables new workflows.
- 03ChallengeOffensive security tests assumptions and attack paths.
OUTCOME / Fewer handovers. Earlier clarity. One system that holds up in production.
WHEN A TECHNICAL PROBLEM HAS TO BE SOLVED
When a technical problem
really needs to be solved.
Not every task needs a long transformation programme. Teams often need an experienced technical partner who understands the constraint, takes ownership and delivers a robust result.
The roadmap is growing faster than the team
An experienced Laravel developer needs to take ownership and deliver critical functionality reliably.
See the relevant support →An important release is approaching
A web application or API needs an independent, realistic assessment before launch.
See the relevant support →Not sure which discipline fits? Describe the goal, current system and most expensive constraint. I will assess whether development, AI, security or a combination is useful.
Describe your situation ↗01 / ONE TECHNICAL SYSTEM
Three disciplines.
One technical partner.
Modern products must be delivered quickly, scale reliably and withstand real attacks. These perspectives inform the same decisions from the start.
01
AI DEVELOPMENT
AI & LLM Development
RAG systems, AI agents and local LLMs for specialist processes where sources, quality and data protection must remain verifiable.
Frontier models accelerate delivery. Local models keep confidential data inside your controlled environment.
- →RAG, embedding models & vector databases
- →Training-data pipelines & fine-tuning
- →Local models, quantisation & inference
- →Agents, evals & production operations
02
LARAVEL DEVELOPMENT
Laravel Development
Laravel development for new platforms and existing applications, with clear domains, automated tests, secure permissions and predictable operations.
You receive production code and decisions your team can understand and continue after the handover.
- →Laravel platforms & SaaS
- →APIs, integrations & data flows
- →Queues, search & performance
- →Tests, upgrades & secure architecture
03
OFFENSIVE IT SECURITY
Offensive IT Security
Manual security assessments for web applications, APIs, mobile apps, infrastructure and source code, with reproducible findings instead of unchecked scanner output.
Offensive experience and development practice connect an attacker’s view with remediation your team can implement.
- →Web & API penetration tests
- →Mobile apps & infrastructure
- →Security-focused source code review
- →Bug bounty, EASM & research
02 / WHY THE COMBINATION WORKS
Clarity before effort.
Evidence before claims.
You receive a clear technical decision, verifiable intermediate results and a system your team can continue after the engagement.
How I work and my background →01DISCOVER
Understand the constraint
We clarify the goal, system, risks and framework before implementation.
02SCOPE
Choose the smallest useful scope
The first step answers the most expensive open question instead of producing as much surface area as possible.
03DELIVER
Deliver measurable results
Code, tests, evals or reproducible findings show what actually works.
04TRANSFER
Transfer knowledge
Decisions, risks and operations remain understandable to the responsible team.
03 / SELECTED PROJECTS
Selected work.
Real systems.
Real platforms, products and tools. Confidential details remain anonymised; the starting point, technical decision and outcome are described concretely.
PROJECT RECORD / TECHNICAL CONTEXTAI for legal work · Confidential
LaravelLLMsEmbeddings
01
CASE / AI FOR LEGAL WORK · CONFIDENTIAL
Legal Intelligence Platform
Accelerating legal research and preparation with verifiable sources.
A platform for a legal-sector company makes extensive legal sources accessible, structures matters and prepares working drafts. Several lawyers supplied real test cases and evaluated professional quality.
OUTCOMEResearch and preparatory work are brought into one workflow while legal evaluation and approval remain transparently with the lawyer.
LaravelLLMsEmbeddingsVector searchQuality tests
PROJECT RECORD / TECHNICAL CONTEXTAI-assisted IT security
Local LLMsAI agentsPython
02
CASE / AI-ASSISTED IT SECURITY
Autonomous Pentest Agent
A pentest agent that is not tied to one model provider.
An autonomous system plans tests, uses isolated security tools, evaluates evidence and documents reproducible vulnerabilities. The architecture works with different model classes.
OUTCOMEStrong results in realistic scenarios using local models, restricted tool access and clear human control.
Local LLMsAI agentsPythonDockerBurp Suite
PROJECT RECORD / TECHNICAL CONTEXTCustom business software
LaravelCRMReporting
03
CASE / CUSTOM BUSINESS SOFTWARE
CRM and Project Platform
Combining sales, projects and team workflows in one Laravel application.
The custom platform maps CRM, sales management, projects and employee workflows to the organisation’s actual processes.
OUTCOMEA shared data set and explicit ownership replace part of the previously fragmented tools and manual handovers.
LaravelCRMReportingRBAC
PROJECT RECORD / TECHNICAL CONTEXTExternal Attack Surface Management
EASMReconLaravel
04
CASE / EXTERNAL ATTACK SURFACE MANAGEMENT
Argos EASM
Continuously identify external attack surfaces before attackers exploit them.
DSecured Argos identifies public systems, monitors change and prioritises exposed services and potential vulnerabilities.
OUTCOMEIndividual scans become an ongoing process for the real external attack surface.
EASMReconLaravelDistributed scans
View Argos at DSecured ↗04 / CLIENT FEEDBACK
What clients value
about the collaboration.
“Damian treats the client’s problem as a challenge and the result is always outstanding. He goes deeply into every problem until he finds a solution. Giving up is not an option for Damian.
“Damian is a real stroke of luck. Clear, open communication and completely transparent work make the collaboration a success. Our requirements were implemented competently and flexibly.
“Throughout our long collaboration Damian has always been a reliable partner who contributes more than programming. He proactively suggests improvements and delivers work of the highest quality.
“His technical expertise is invaluable in many situations. Alongside feature development, Damian proactively applies his understanding of security and performance. Budget planning is always realistic.
“The work ranges from removing malware to implementing a dedicated CRM with sales, project and employee management. We continue to have Damian implement our ideas. There is no better compliment.
“Our experience working with Damian has been extremely positive. Alongside quick comprehension and very fast response times, his specialist knowledge and faultless delivery stand out in our joint projects.
05 / TECHNICAL INSIGHTS
Technical answers
with substance.
Laravel Security12 min read
Laravel security audit: a practical checklist for production applications
A prioritised audit checklist covering attack surface, configuration, dependencies, authorisation, data flows, jobs and deployment.
AI Agents5 min read
When is an AI agent ready for production? Boundaries, evals and approvals
A production-ready agent needs explicit states, restricted tools, measurable quality and human decisions at high-impact boundaries.
Laravel Development9 min read
Taking over an existing Laravel project: a technical entry plan
How team leads use LLM-assisted code mapping, targeted tests, Xdebug and a controlled first delivery to take ownership of a Laravel system.
YOUR NEXT TECHNICAL STEP
What problem does your team
need to solve next?
Describe the goal, starting point and constraint. You receive a personal technical assessment and a useful next step.