About

I do security audits and penetration testing for web and mobile applications.

Previously, I was the founding CTO of Gojek (now GoTo), where I built their first cybersecurity team and scaled infrastructure from thousands to millions of users. Before that, I launched Zalora’s Indonesia e-commerce platform as VP of Tech. I’ve written two books on mobile security and have 20+ years of experience across startups, banks, telcos, and oil & gas.

Some highlights: reverse engineering UAE state-sanctioned Blackberry malware, demonstrating a 400% payout exploit on a bank’s fixed deposit system, and getting chased by security guards while dumpster diving at a Dubai bank.