Available for Projects

Mohamed Malek Wertatani

Cybersecurity Pentester & Full-Stack Web Developer

I break things so you don't have to.
Web pentesting • Secure full-stack apps • Red team operations

3+
Years Experience
10+
Projects Completed
5+
Certifications
MW

What I Offer

Professional services that protect your business and accelerate your growth

Web Application Penetration Testing

Comprehensive security assessments of your web applications. I identify vulnerabilities using manual testing and automated tools, covering OWASP Top 10, business logic flaws, and advanced attack vectors.

  • Manual & Automated Testing
  • OWASP Top 10 Coverage
  • Detailed Security Reports
  • Remediation Guidance
Get Started

Secure Full-Stack Development

Build modern, secure web applications with React, Next.js, and Node.js. Security-first approach with clean code, best practices, and scalable architecture that protects your business from day one.

  • React & Next.js Apps
  • Node.js Backend APIs
  • Secure Authentication
  • Database Design
Get Started

Technical Audits & Red Team Consulting

GRC platform development, security audits, and red team operations. Help organizations build compliance frameworks, conduct security assessments, and strengthen their security posture.

  • GRC Platform Development
  • Active Directory Testing
  • Security Audits (ANCS)
  • Red Team Operations
Get Started

Featured Projects

Recent work showcasing my expertise in cybersecurity and development

2024-2025

GRC Platform – OffensyLAB

Centralized Governance, Risk, Compliance platform with organizational context, HR management, ISMS, and audit management modules.

Node.jsMySQLDockerRESTful APIs
2023-2024

AD Penetration Testing Automation Tool

Automated Active Directory pentesting workflows with misconfiguration checks, privilege escalation, and comprehensive reporting.

PythonFlaskReactActive Directory

About Me

Currently working as a Cybersecurity Pentester in a Tunisian company, with professional experience including web application pentesting and technical security audits (including for ANCS – Tunisia).

Holder of a Bachelor's degree in Information and Communication Technology specialized in Network Security with strong foundations in development and networking.

Passionate about offensive security, I stay sharp by being active on Hack The Box, CTFs, and YesWeHack (bug bounty). Currently preparing for eWPTx certification, with a strong commitment to continuous learning and staying ahead of emerging threats.

Certifications

eWPTxCertified
eWPTCertified
eJPTCertified
CCNA 1Certified

Active On

Hack The BoxYesWeHackCTF Competitions

Technical Skills

A comprehensive toolkit for security and development

Penetration Testing

OWASP Top 10
Burp Suite
SQLMap
ffuf
XXStrike
Active Directory Pentesting
Nessus
OpenVAS

Development

JavaScript/TypeScript
React & Next.js
Node.js & Express
Python & Flask
RESTful APIs
Docker

Security Tools

Ghidra
gdb
Metasploit
Wireshark
Nmap
John the Ripper

Databases & Infrastructure

MySQL
PostgreSQL
MongoDB
Redis
Linux Administration
Network Security

Experience & Education

Work Experience

Cybersecurity Pentester

Current

DefensyLAB Tunisia

Conducting web application penetration testing, security audits, and vulnerability assessments for clients including ANCS Tunisia.

Tunisia Team Leader

2023-2024

Engineers Spark ISETCOM Tunis

Led the Tunisia team in cybersecurity initiatives and technical projects.

CTF Competitor

2024–Present

Hack The Box

Active participant in Capture The Flag competitions, continuously improving offensive security skills.

Education

Cybersecurity Engineer

2025-2028

Engineering degree in Security of Computer Systems and Networks

Network Security Technician

2022-2025

Licence in Network Security

Baccalaureate in Science/Technology

2022

High School of Habib Bourguiba, Dahmani, El Kef, Tunisia

Get In Touch

Ready to secure your applications or start your next project? Let's talk!

Contact Information

Why Work With Me?

  • ✓Professional security assessments with detailed reports
  • ✓Secure, scalable full-stack development
  • ✓Fast turnaround and clear communication
  • ✓Continuous support and maintenance