$$ \newcommand{\N}{\mathbb{N}} \newcommand{\C}{\mathbb{C}} \newcommand{\R}{\mathbb{R}} \newcommand{\Z}{\mathbb{Z}} \newcommand{\ZZ}{\ooalign{Z\cr\hidewidth\kern0.1em\raisebox{-0.5ex}{Z}\hidewidth\cr}} \newcommand{\colim}{\text{colim}} \newcommand{\weaktopo}{\tau_\text{weak}} \newcommand{\strongtopo}{\tau_\text{strong}} \newcommand{\normtopo}{\tau_\text{norm}} \newcommand{\green}[1]{\textcolor{ForestGreen}{#1}} \newcommand{\red}[1]{\textcolor{red}{#1}} \newcommand{\blue}[1]{\textcolor{blue}{#1}} \newcommand{\orange}[1]{\textcolor{orange}{#1}} \newcommand{\tr}{\text{tr}} \newcommand{\id}{\text{id}} \newcommand{\im}{\text{im}\>} \newcommand{\res}{\text{res}} \newcommand{\TopTwo}{\underline{\text{Top}^{(2)}}} \newcommand{\CW}[1]{\underline{#1\text{-CW}}} \newcommand{\llbracket}{\mathopen{[\![}} \newcommand{\rrbracket}{\mathclose{]\!]}} % specific for this document \newcommand{\cellOne}{\textcolor{green}{1}} \newcommand{\cellTwo}{\textcolor{red}{2}} \newcommand{\cellThree}{\textcolor{brown}{3}} \newcommand{\cellFour}{\textcolor{YellowOrange}{4}} $$

AI & Secure Software Consulting for Regulated Industry

Security audits, penetration testing, reverse engineering and on-premises AI for hospitals, medical-device makers and KRITIS. Luca Happel, Düsseldorf.
Keywords

security audit, penetration testing, reverse engineering, vulnerability research, medical device cybersecurity, MDR, IEC 62443, NIS2, KRITIS, on-premises AI, RAG, data science, Düsseldorf, math tutoring, algebra, algebraic geometry, topology, type theory

English · Deutsch

Hi, I am M.Sc. B.Sc. B.Sc. Luca Leon Happel, a mathematician, computer scientist and security researcher based in Düsseldorf, Germany. My team and I build, audit and hack high-security systems and regulated industries, where mistakes are expensive. We do: data science, AI, high-security audits, reverse engineering and app development. We work remotely and on-site across Germany and Europe.

Shop My blog

Published in European Heart Journal – Digital Health

2× 1st place HHU Ideenwettbewerb · Festival award

Critical vulnerability found and responsibly disclosed

MDR-compliant medical software since 2022

Who I work with

Hospitals & university clinics

Clinical AI and data science on patient data, GDPR-compliant on-premises LLMs and RAG, security reviews of clinical IT.

Medical-device makers

MDR-compliant medical software, cybersecurity audits and reverse engineering of device firmware, apps and protocols.

Critical infrastructure & industry

Penetration testing and vulnerability research for KRITIS operators and industrial software (NIS2, IEC 62443), with responsible disclosure.

Track record

Screenshot of the monti clinical patient-monitoring platform

Peer-reviewed publication · August 2025

monti – AI for Patient Monitoring

AI-based clinical monitoring with advanced ML on high-security patient data

AI-based monitoring platform developed at University Hospital Düsseldorf, using advanced AI methods on high-security clinical patient data to detect complications in heart and oncology patients.

10.1093/ehjdh/ztaf004
Example data
European Heart Journal – Digital Health

journal AI clinical monitoring

Vendor acknowledgement of a responsibly disclosed security vulnerability

Responsible disclosure · March 2026

High-Severity Security Remediation

Critical infrastructure software

Independent security audit of a mission-critical software suite used in highly regulated and highest-tier security environments. Identified a high-severity vulnerability that, under some conditions, posed a risk to physical safety, public security and high monetary losses. The finding was responsibly disclosed and formally acknowledged by the vendor. Corrective measures have been implemented to secure the ecosystem.

security research responsible disclosure reverse engineering