Stan van der Vleuten

00 · about

I am Stan, or wobbat online. I work at an offensive security company in the Netherlands, where I review custom software and lead a small team of security specialists. A lot of my day goes into reading other people’s code and figuring out whether I can make it do something it shouldn’t.

Finding a vulnerability usually gives me more questions. I want to understand why it is there and what made it easy to miss, which tends to involve reading more of the surrounding code than I originally planned.

Like just about everyone on the internet now, I spend a lot of time talking to AI and building things with and around it. At work, that includes figuring out how to integrate it into the offensive security workflows I use every day. I write about some of that here, partly because trying to explain what I am doing helps me understand it too.

I have ADHD, autism and dyslexia. Gotta catch them all, baby! Outside work I drink coffee, read fantasy novels, and walk around with a camera.

01 · path

  1. 2024

    Senior Security Specialist · WhiteHats

    I take the technical lead on embedded and IoT security assessments, covering firmware, Linux-based devices, communication stacks, and system-level components. I also regularly assess web, mobile, and native desktop applications, you name it.

    I am helping shape how we use AI across the company’s offensive security work and integrating it into our workflows. Alongside the technical work, I am the main point of contact for clients from scoping through delivery and am a team lead for a small team of security specialists.

  2. 2021

    Security Specialist · WhiteHats

    I joined WhiteHats to follow my passion for application security and focus fully on assessing custom-built software in all its forms. Alongside finding vulnerabilities, I worked with development teams on the design decisions behind them and how to address them.

  3. 2019

    Ethical Hacker · IP4Sure (now Cyberlab)

    I was the first pentester on staff and helped build the company’s penetration testing service. My work covered infrastructure and web applications, from finding and exploiting vulnerabilities to explaining their impact to clients.

02 · favourites

03 · links

github
@wobbat
linkedin
stanvdvleuten
photos
wobbat.com/photos
email
mail@wobbat.com