Penetration tester.
Bug bounty hunter.

What I do.

I work as a penetration tester and hunt vulnerabilities through bug bounty programs. At UNGUESS, I manage triage and security testing campaigns for private organizations.

These roles inform each other. Testing means investigating how a system behaves under unexpected conditions. Triage means checking the evidence, understanding the context, and making the impact clear enough for someone else to act on it.

Areas of work

Penetration testing

Investigating application behavior, access controls, and the assumptions that connect components.

Vulnerability research

Following unusual behavior, developing reproducible evidence, and documenting the underlying cause.

Triage & campaign management

Assessing reports and coordinating security testing for private organizations through my work at UNGUESS.

Background

This site collects selected public advisories and technical writing. The older CTF and certification articles remain part of the archive: a record of the learning that led here.

My academic background includes the University of Florence and the EIT Digital Master School, with studies at the University of Trento and the University of Twente.

Outside security, I spend time in the mountains and travel when I can.