About me

I’m Liang Zhong, based near Paris, France. I’ve been in IT for 12+ years and in penetration testing and offensive security consulting since 2020. I do the scoping, testing and reporting myself.

Before consulting, I worked in IT support, software development and in-house application security. I also scoped external pentests, reviewed the reports and followed the fixes with developers.

OSAI+ · OSEP · OSWE · OSCP
French · English · Spoken Mandarin
LinkedIn

How an engagement works

  1. Scoping & authorization

    Targets, goals, dates and limits, and whether AI tools may be used on your data. Signed rules of engagement before testing starts.

    You get: signed rules of engagement and a quote.

  2. Testing

    Manual, with tooling as support.

    You get: critical findings as soon as I find them, not at the end.

  3. Report & debrief

    Proof, impact and concrete fixes, ranked by risk, then a call with your team.

    You get: the report, in French or English, and a debrief call.

  4. Retest

    Once the fixes ship, I verify them. Evidence stays encrypted and is deleted 90 days after the final report.

    You get: an updated report showing what’s fixed.