About ShellnotesWithSaint

if you're reading this from a terminal. App security engineer by day, penetration tester and Flutter developer depending on which client is on fire. Im currently a Chief Exploit Officer (CEO) at Savannah Informatics Limited at the same time currently at Cynot as an AppSecEngineer .

Most of what I do lives at the boundary between building things and breaking them — securing CI/CD pipelines, running VAPT engagements, then going home and shipping Flutter apps that need the same scrutiny I just charged someone else for. I run a handful of products under A3s, my own outfit, usually more of them at once than is strictly sane: an M-Pesa escrow platform, a pharmacy management system, an AI-assisted API security auditor, a campus venue tracker — the list changes depending on which one is misbehaving this week.

Before this I did security work in Safaricom's Corporate Security Cluster, which is where I learned that "it works" and "it's secure" are rarely the same sentence. CEH and DevNet Associate certified, for whatever that's worth on a blog nobody asked to be credentialed.

This site is where the debugging notes go once they're done teaching me something — usually after they've already cost me a few hours I won't get back.