À propos

I'm Patrik Grobshäuser — a security researcher. Threat detection and vulnerability management is the day job: reading code, breaking things on purpose, writing detection signatures for things I'd rather attackers didn't get to first.

Before that: Recorded Future as a Senior Threat Research Engineer on the Attack Surface Intelligence platform. Before that, Shopify as a security engineer triaging HackerOne bug bounty submissions.

Before Shopify: HackerOne, where I worked as Triage Manager EMEA and as an Application Security Engineer before that. ERNW in Heidelberg. Bugcrowd as an Application Security Engineer. I've also written at IT-Securityguard since 2011.

threatover is where I take on consulting engagements alongside the day job. Pentest, bug bounty programme design, triage, retained advisory, and WordPress incident response. I do the work myself — from scoping to final report.