Email · usually within two working days

Say whichkind of work

There is no contact form on this site, and no chat widget. One email address, read by one person. Tell me which of the two kinds of work it is and what the system or the target is, and I will tell you if it is a fit before anything else.

What I take on

  • Penetration testing

    Web applications and infrastructure. Scoped in writing before anything starts, and the findings stay yours — nothing gets published, and no client is named as a reference without asking.

    Email about a test
  • Software

    Systems work: engines, netcode, backends, and the build and release tooling around them. C++, Node, Next.js.

    Email about a build
  • A bug in GeneralsX

    Same address. Say which platform and which build — the build id is in the corner of the main menu, and the launcher can produce diagnostics to attach.

    Check your build

What happens to your email

Worth stating plainly, because most sites do not.

Where it lands
A Proton Mail mailbox. Proton is the email provider and processes it as such; nobody else is copied in.
What I keep
The message you sent and the address you sent it from — nothing more from the email itself. There is no form, no tracking pixel and no CRM. Loading this page, like loading any page here, writes the one server-side log row set out in Privacy, which is separate from anything you send me by mail and is deleted after thirty days.
How long
Enquiries that go nowhere are deleted once the thread is clearly over. Correspondence attached to actual work is kept while the engagement runs and for as long afterwards as the contract or tax rules require.
What I never do
Sell it, share it, add you to a mailing list, or use it for anything other than answering you. There is no mailing list to add you to.
Removing it
Ask, and I will delete the thread and confirm. See Privacy for the rights you have and how to use them.
By emailing me you are choosing to send that information. Please do not put credentials, API keys, live customer data or anything else sensitive in a first email. If an engagement needs that kind of material we will agree a channel for it first.

Who you are dealing with

Trading as
wh1ter0se — an independent developer working as a sole trader. I do not publish my legal name or address on this site; the work involves offensive security, and that is a deliberate choice rather than an oversight.
Based
Remote, and deliberately no more specific than that — for the reason given above. Working with clients worldwide.
Contracting
For paid work I will give a client my legal identity and invoicing details under the engagement agreement. Ask at that point; it is not a secret, it is just not on a public page.