whoami
Stan van der Vleuten
I'm Stan, or wobbat online. I work as a security researcher and team lead at WhiteHats, an offensive security company in the Netherlands. Most of my work is taking software apart: reading code, tracing how systems behave, exploiting the weird bits, and figuring out where AI actually helps offensive security work instead of just looking impressive.
I don't like stopping at “this is vulnerable.” That gives me little fulfillment. I want to understand why it was vulnerable, and the path that got it there: the assumptions, shortcuts, interfaces, and missed details that made the bug possible.
I'm neurodivergent, which mostly means too many open tabs, too many questions, and a hard time leaving a system alone until it makes sense. Outside work I drink coffee, read fantasy novels, and walk around with a camera.
I write some of that down on my blog.
- role
- senior offensive security consultant & team lead
- focus
- application security · embedded systems · linux · secure code review · AI-assisted offensive workflows
- based
- netherlands
- speaks
- nl · en
- Senior Security Consultant WhiteHats 2024-present
Senior application security work across web, native desktop, mobile, embedded, and IoT systems. Team lead for a small group of security specialists, primary client contact through scoping and delivery, and lead for embedded assessments covering firmware, Linux-based devices, communication stacks, and system-level components. Currently applying AI to offensive security workflows.
- Security Specialist WhiteHats 2021-2024
Application security assessments across web, native, and mobile. Reporting, stakeholder presentations, and secure-design advisory to development teams.
- Ethical Hacker IP4Sure (now Cyberlab) 2019-2021
First pentester on staff, built the service from scratch. Infrastructure and web application pentesting: manual vulnerability discovery, exploitation, impact analysis, reporting, and client advisory across the development lifecycle.
- BSc ICT & Cyber Security Fontys Hogeschool 2015-2019
Cum laude
- github
- @wobbat
- stanvdvleuten
- blog
- afleidi.ng
- mail@wobbat.com