Statistical analysis & modelling
Analyses and models you can defend in front of reviewers, regulators or your board.
- Study design & power analysis
- Report with reproducible code
Fixed pricequote after free call
Book now
English · Deutsch
Shop
Start here
Free 30-minute call
Describe your problem, get an honest assessment and a written fixed-price proposal. NDA on request.
Free30 min
Book now
“Buy now” and “Book now” open the Cal.com booking calendar below (data is transferred to Cal.com, see the privacy policy).
Data Science & AI
Monitoring, anomaly detection & prediction
ML models that watch your data and raise the alarm early, as monti does for heart and oncology patients.
- Model development & validation
- Integration into your systems
Fixed pricequote after free call
Book now
On-premises RAG & LLM integration
AI assistants and document search running on your own hardware. No data leaves your network.
- Setup on your infrastructure
- Access control & audit logging
Fixed pricequote after free call
Book now
Reproducible pipelines & reports
Data pipelines and reports your domain experts can read, trust and rerun.
- Versioned, tested pipelines
- Automated reports
Fixed pricequote after free call
Book now
High-Security Audits
Security audit
Independent audit of medical, industrial or critical-infrastructure software against MDR, IEC 62443, NIS2 or FDA guidance.
- Prioritised findings report
- Fix recommendations & re-test
Fixed pricequote after free call
Buy now
Penetration test
Web apps, APIs, desktop software and devices tested the way an attacker would, under written scope and authorisation.
- Findings with reproduction steps
- Management summary
Fixed pricequote after free call
Buy now
Threat modelling & secure code review
Find design flaws before attackers do: threat models and line-by-line review for regulated environments.
- Threat model document
- Review comments in your repository
Fixed pricequote after free call
Buy now
Formal verification (Lean 4)
Mathematical proof that critical components are correct and secure with respect to their specification, not just tested.
- Formal specification
- Machine-checked proofs
Fixed pricequote after free call
Book now
On-site Security
Data center security assessment
On-site review of your data center or server room: physical access, racks, network segmentation, management interfaces (iLO, iDRAC, IPMI) and backup readiness, measured against ISO 27001, EN 50600 or BSI IT-Grundschutz.
- Walk-through & technical tests
- Prioritised findings report
Fixed pricequote after free call
Buy now
On-premises AI server setup
GPU servers for local LLMs and RAG installed, hardened and put into operation in your own server room. No data leaves your building.
- Hardware selection & installation
- Hardening, access control & monitoring
Fixed pricequote after free call
Book now
Physical penetration test
Can an outsider get in? Doors, badges and RFID cloning, tailgating, unlocked screens and open network ports, tested on-site under signed authorisation.
- Agreed rules of engagement
- Report with photos & fixes
Fixed pricequote after free call
Buy now
Internal network pentest (assumed breach)
Plugged into your office network like an attacker who got in: how far can they go, up to taking over Active Directory?
- Attack paths & privilege escalation
- Concrete hardening steps
Fixed pricequote after free call
Buy now
Hospital & medical-device network assessment
Medical devices on the wards found and checked, and the separation of the medical-device network reviewed, with minimal impact on patient care.
- Device inventory & exposure
- Segmentation review
Fixed pricequote after free call
Buy now
Reverse Engineering
Binary & firmware analysis
Find out what compiled software and device firmware really do, without source code.
- Architecture & behaviour report
- Security findings
Fixed pricequote after free call
Buy now
Protocol reverse engineering
Undocumented network, serial and wireless protocols documented so you can integrate, migrate or secure them.
- Protocol specification
- Example client or parser
Fixed pricequote after free call
Book now
Vulnerability research & disclosure
In-depth vulnerability research with coordinated, responsible disclosure to the vendor.
- Proof of concept
- Disclosure handling
Fixed pricequote after free call
Book now
App & Software Development
Web, desktop & mobile apps
From prototype to product, with code in your repository from day one.
- Design, implementation & tests
- Deployment & server setup
Fixed pricequote after free call
Book now
Backend & systems software
Backends, services and systems code in Rust, Python and C/C++, secure by design.
- APIs & databases
- Docs & handover
Fixed pricequote after free call
Book now
Embedded firmware
Firmware for microcontrollers such as the ESP32 in memory-safe Rust or C/C++, built to high-security standards.
- From breadboard to finished device
- Optional formal verification
Fixed pricequote after free call
Book now
Clinical front-ends
Clinical applications with role-based access control and audit trails, built for MDR environments.
- Usable by clinical staff
- GDPR-compliant data handling
Fixed pricequote after free call
Book now
Maintenance & support
Ongoing operation, security updates and support for software we deliver.
- Security updates
- Terms agreed in advance
Monthly feeagreed in advance
Book now
Tutoring: Mathematics & Computer Science
School tutoring (Gymnasium, vocational school)
Maths and computer science for pupils at Gymnasium, vocational school and more, at your pace.
- Closing gaps in the fundamentals
- Abitur preparation
Hourly rateagreed in advance
Book now
University tutoring
Linear algebra, analysis, algebra, algebraic geometry, topology, type theory, probability theory, operating systems, functional & logic programming, machine learning and more.
- Working through exercise sheets together
- Complex theory explained clearly
Hourly rateagreed in advance
Book now
Exam crash course
Exam coming up soon? An intensive format focused on what you need to pass with confidence.
- Targeted exam preparation
- Practice with past-paper-style tasks
Hourly rateagreed in advance
Book now
Long-term exam preparation
Steady preparation over the semester or school year for top grades, adapted to your pace and goals.
- Regular sessions
- Flexible to your goals
Hourly rateagreed in advance
Book now
Questions clients ask
What clients do you serve?
Any organisation where software has to be secure, correct and trustworthy, from start-ups and SMEs to large enterprises, research institutions and the public sector. Typical clients come from healthcare and medical technology, critical infrastructure, industry and manufacturing, finance and insurance, and software vendors who need an independent security review. If mistakes in your system are expensive, we should talk.
Do you serve hospitals?
Yes. Our track record includes monti, an AI-based patient-monitoring platform that I developed at University Hospital Düsseldorf, published in European Heart Journal – Digital Health. For hospitals and university clinics we build clinical data science and AI, GDPR-compliant on-premises LLM and RAG systems, clinical front-ends with access control and audit trails, and we review the security of clinical IT.
Do you serve critical infrastructure (KRITIS) operators?
Yes. We carry out security audits, penetration tests and vulnerability research for operators and suppliers in energy, water, transport, healthcare and other KRITIS sectors, aligned with NIS2 and IEC 62443. Our track record includes a high-severity vulnerability in mission-critical software used in highest-tier security environments, found and responsibly disclosed.
Do you help in the development of medical-grade devices?
Yes. We have built MDR-compliant medical software since 2022 and support device makers across the lifecycle: software architecture and implementation, cybersecurity risk assessment and threat modelling, security testing, reverse engineering of existing firmware, and documentation that supports your MDR or FDA technical file.
Can you develop for embedded systems?
Yes! We write firmware and embedded software in Rust and C/C++ for microcontrollers such as the ESP32. One example is my Corne ergonomic keyboard with two PSP joysticks as dual trackpoints: I designed, wired and built it, and wrote the firmware from scratch in Rust (RMK), because no existing firmware supported two joysticks. It works wired and wireless. For security-critical devices we hold embedded code to high-security standards: memory-safe Rust, threat modelling, security review and formal verification in Lean 4, so that critical components are provably correct, secure and bug-free with respect to their specification, not just tested.
Do you offer tutoring in mathematics and computer science?
Yes. Tutoring is led by me, with an M.Sc. in Mathematics, a B.Sc. in Mathematics and a B.Sc. in Computer Science. We tutor pupils at Gymnasium, vocational school and beyond (fundamentals, Abitur preparation) as well as university students in linear algebra, analysis, algebra, algebraic geometry, topology, type theory, probability theory, operating systems, functional and logic programming, machine learning and more. Whether you need an intensive crash course right before an exam or long-term preparation for top grades, we adapt to your pace and goals: working through exercises together, explaining complex theory clearly and preparing you specifically for your exam.
Can you work with sensitive patient or company data?
Yes. We design for data minimisation, access control and auditability, and can deploy AI systems such as RAG and LLMs on-premises so sensitive data stays in your network. We can sign an NDA before reviewing project details.
Do you offer penetration testing?
Yes. We test web apps, APIs, desktop software, firmware and devices the way an attacker would, under a written scope and authorisation. You get prioritised findings with reproduction steps and concrete fixes; vulnerabilities in third-party products are handled through coordinated, responsible disclosure.
Do you take on small, clearly scoped projects?
Yes. An engagement can begin with a security review, feasibility assessment, prototype or fixed-scope development task. After the free call, you receive a written proposal with scope, timeline and price.
Do you work remotely or on-site?
Both. Most work can be delivered remotely across Germany and Europe. On-site work is also possible; travel and on-site costs are quoted separately based on the location and duration of the engagement.
What do you deliver?
Depending on the engagement: actionable audit findings, production-ready code in your repository, reproducible analysis, tests, documentation and a handover your team can operate independently. We can also deliver complete applications, including backend, deployment and server setup. If you would like ongoing operation, updates or support, maintenance fees may apply and are agreed in advance.
Locations
Based in Düsseldorf, on-site in the Rhine-Ruhr region, the Netherlands and Belgium, remote or on-site across the EU.
How it works
1. Free call
30 minutes, you describe the problem.
2. Fixed quote
Scope, timeline, price. NDA on request.
3. Delivery
Code in your repo from day one.
4. Handover
Docs, tests, walkthrough.
Start here
Book a free 30-minute call
Calendar loads from Cal.com after you click (privacy policy) · open in new tab
Or describe your project by email
Reply within one business day. Strictly confidential.
PGP: 0x75A3FE23C6311437 · public key