The Solution Enablers

GPU-accelerated ROM bit extraction from semiconductor die photographs. RomScope automates the full pipeline from SEM image to decoded firmware: FFT-based grid detection, CUDA-powered bit classification, design rule checks, and a 576-configuration brute-force decoder — all in a single native application.

Open-source USB security research framework for the ESP32-S3. Bypasses standard USB stack validation by accessing the DWC2 controller directly, enabling raw protocol-level security testing. Ships with a web UI, REST API, OpenAPI docs, request chaining with flow control, and automated bruteforce capabilities.

Proof-of-concept exploit for CVE-2024-30212. Demonstrates how a malicious USB mass storage device can exfiltrate sensitive data from a host system by abusing protocol-level trust assumptions in the USB MSC stack.

Reverse engineered the firmware of the unreleased Kanye West Stem Player (by Teenage Engineering) and built a browser-based update tool using WebUSB. Gave device owners a way to flash firmware without any official support or proprietary software.

Built the digital infrastructure for a non-profit that provides educational support to children with migration backgrounds across German schools. Designed and delivered their platform for managing on-site and remote tutoring at scale.

Led the DACH market expansion for the largest digital gift card provider in the Benelux region. Developed core API components for their transaction pipeline and managed the rollout across Germany, Austria and Switzerland.

Developed deep-learning computer vision pipelines that interface with industrial inspection hardware. Built the bridge between their ML models and industry-standard machine protocols for real-time quality control on production lines.

Engineering partner for an EV accessories manufacturer. Developed embedded firmware and companion software for aftermarket enhancement devices spanning scooters, e-bikes, motorbikes and passenger vehicles.

A significant share of our work falls under NDA — particularly in security research, vulnerability assessment and defence-adjacent consulting. We appreciate the trust of clients we cannot name publicly.