Financial-grade security expertise, sized for growing businesses.
OryoTech was founded by ST3RN, a cybersecurity engineer and freelance pentester with 5+ years of experience, much of it spent auditing IT and security inside a CAC 40 financial group.
Security shouldn't slow your business down. It should make it easier to win clients who ask hard questions.
- Based in
- France · remote EU
- Languages
- English · French
- Experience
- 5+ years
- Focus
- SMEs & scale-ups
A security report nobody reads is a security report that failed.
Why I left a CAC 40 group to work with SMEs
In banking, a security gap isn't a technical detail. It's a regulatory finding, a board-level question and sometimes a headline. That's where I learned to make every finding evidenced, prioritized and defensible.
Growing businesses face the same attackers, with a fraction of the budget. Large consultancies are priced out of reach, and general IT providers aren't security specialists. I founded OryoTech to close that gap.
Today I deliver audits, penetration tests, cloud and AI security reviews, and training, in English or French, on-site in France or remotely.
[MA PHRASE PERSONNELLE]
Four commitments on every engagement
Plain language
Readable by your CEO, usable by your developers. No jargon wall.
Evidence, not noise
Every finding is verified manually and proven. No raw scanner dumps.
Confidential by default
NDA signed before I see anything. Professional liability insurance on every engagement.
Honest scoping
If you don't need a full audit yet, I'll tell you. Fixed price, agreed upfront.
Three areas of expertise, one practitioner mindset
Offensive security
Web application and network penetration testing, vulnerability assessment and security reviews. I think like an attacker so you can defend like someone who saw it coming.
Cloud & AI security
AWS, Azure, GCP and Microsoft 365 configuration reviews. Security testing of LLM-based applications, covering prompt injection and data leakage, plus EU AI Act readiness.
Audit & compliance
Security audits and policy work shaped by years in a heavily regulated financial environment. I know what auditors, clients and regulators expect to see, including GDPR and NIS2.
The path to OryoTech
- [2021] – [2026]
Cybersecurity education
Bachelor's degree in cybersecurity, followed by a master's-level engineering degree in cybersecurity.
- [2023] – [2024]
Security engineer, CISO office
Worked alongside a Chief Information Security Officer on security governance, risk management and day-to-day security operations.
- [2024] – [2026]
IT & cybersecurity auditor, CAC 40 financial group
Several years auditing IT systems and security controls in one of France's largest financial groups, where every finding had to be evidenced, prioritized and defensible.
- [2026] – today
Founding OryoTech
Launched OryoTech to give growing businesses access to the same rigor, with hands-on testing, clear reports and training that sticks.
Certified across the attack surface
Each credential can be verified. Click a badge to see it on the issuer's platform.
CompTIA PenTest+
Penetration testing and vulnerability management
Offensive · Verify → [LIEN]Jr Penetration Tester
Hands-on offensive security (TryHackMe)
Offensive · Verify → [LIEN]CCSK v5
Cloud security architecture and governance (Cloud Security Alliance)
Cloud · Verify → [LIEN]CLLMSP
Security of large language model applications (Red Team Leaders)
AI · Verify → [LIEN]GDPR training
Data protection fundamentals from the CNIL, France's regulator
Compliance · Verify → [LIEN]
You give me access to sensitive systems. Here's how I handle it.
- Written authorization first. No test starts without a signed scope, targets and time windows.
- NDA and insurance. Signed before kickoff, professional liability coverage on every engagement.
- Critical issues escalated immediately. You don't wait for the final report to hear about a severe risk.
- Your data, handled under GDPR. Encrypted storage, deleted [X] days after the engagement ends.
[TEXTE DE LA RECOMMANDATION]
Let's talk about your security.
Free 30-minute call with me, not a sales team. You leave with a clear idea of what to test first.