Cloud Security Assessment

Find and fix risks across your AWS accounts

/me

My career is focused on offensive application security and training developers to write secure code — with deep experience assessing and attacking cloud environments.

I help teams understand how attackers move through AWS identities, networks, and data stores, then turn those findings into practical remediation and training.

Andres Riancho

Career

As a freelance consultant I provide services to LATAM unicorns, US companies, startups, and information security firms — including cloud-focused engagements on AWS.

Previously I founded Bonsai and worked as Director of Web Security at Rapid7. I also created w3af and nimbostratus.

Open Source Software

  • w3af: Web application attack and audit framework. GitHub
  • nimbostratus: Exploit and escalate in AWS. GitHub
  • vpc-vpn-pivot: Pivot into private VPC networks. GitHub
Security tooling on screenw3af web application scannerApplication security console

Conferences

Talks on cloud pivoting, esoteric web vulnerabilities, payloads, and secure devops — including Black Hat and OWASP.

Ready to assess your cloud? Contact Andres Riancho.