When I tested applications as a Pentester, the industry focused on finding exploits: SQL injection, cross‑site scripting, broken access control. Vulnerabilities were tracked. Attacks were simulated. But something was consistently overlooked.
Personal Identifiable Information (PII) was often exposed in transit, sent to third parties, logged in URLs, stored in browser history and no one called it a finding unless it was attached to a formal vulnerability like IDOR.
A user's email, name, phone number, or health data leaving a site without consent; Not a priority. Not a ticket. Fixed in the shadows without acknowledgement.
That gap became my focus. That gap is why Mind Your Tech In Business exists.
A government portal where vulnerable people access benefits had account takeover built into its architecture. Not a bug. A design flaw.
A platform millions of people trust was sending their login credentials in plain sight.
A process designed to verify identity actually exposed sensitive documents without encryption, with an option to download.
My personal findings led me to launch Mind Your Tech In Business. The connection between privacy and democracy is not abstract. When voter data is shared without consent. When donor information is leaked to advertisers. When vulnerable people have their benefits accounts exposed by design. These are not technical bugs. They are failures of trust.
I don't make compliance judgments. I don't assign blame. I observe, document, and hand you the evidence. What you do with it — protect your organization, hold someone accountable, or simply fix what is broken — is your decision. That is how privacy and democracy are protected. One investigation at a time.
Schedule a Complimentary Consultation