Marco Mura – Senior Security Consultant

Custom software, built fast and reviewed like a security consultant would.

I build the whole thing, from data model to deployment, with AI-assisted engineering. Then I review it the way I review other people’s code for a living: for correctness, privacy and security. You get working software, tests and documentation.

Write to meSee a delivered project

Terms
Tailored to each project
Review
Security-consultant standard
After launch
Ongoing support available
Where
Remote, worldwide

How I work

  1. Terms that fit the project

    Every client needs something different, so every contract is written for the project: a fixed price, an ongoing collaboration, or something in between.

  2. Built with AI, held to review standards

    I use Claude Code and agent workflows to move fast. Everything that ships is read, tested and reviewed by me as a security code reviewer would: secure by design, privacy-aware.

  3. Support after launch

    Once it is live I can keep maintaining and extending it. If you prefer, your team gets the code, tests and documentation to carry on independently.

Who it suits: startups, small companies and agencies that need a reliable builder. I work remotely with clients worldwide.

Case study

B2B SaaS for out-of-home advertising operators

A management platform for companies that rent out billboards and other advertising spaces. Sales staff see which spaces are free in any period, book them for clients and generate quotes and contracts as PDFs. The system tracks contract expiries and payment schedules and warns the team before deadlines. Built for Spazi Pubblicitari SRLS.

What it did

  • Inventory availability for advertising spaces
  • Contracts with expiry alerts
  • Payment schedules
  • Automatic generation of quote and contract PDFs

How it was built

Front end
React and TypeScript
Database
PostgreSQL, with the domain logic in stored procedures
Access control
Row-level security in the database, mandatory two-factor authentication
Hosting and data
EU hosting, encrypted data, automated backups
Privacy
GDPR-compliant by design

Background

Software is the product. Security work is why you can trust it.

IOActive Inc.

Senior Security Consultant, Oct 2024 – present

Remote, freelance collaboration. Lead reviewer on a large-scale code review engagement held to demanding privacy and quality standards. I own scope, methodology, findings and client reporting.

Darkwaves Infosec

Security Consultant, Jun 2020 – Oct 2024

Remote. Led code review projects covering correctness, performance, privacy and compliance across many languages and platforms. Web and mobile app testing, research and published articles, device fleet compliance projects, testing of video encryption algorithms and Windows drivers, fuzzing of Windows applications.

Also

Languages
C#, C++, C, Java, Objective-C, Swift, Python, Lua, JavaScript, TypeScript
Training
PortSwigger Web Security Academy; ISACA Blockchain Auditor
English
C1 (Cambridge certified)
Writing
“GTA: San Andreas speedrun is secretly a lesson in cybersecurity” (June 2026)
Based
Italy, remote

Selected open source

One public project. Most of my client work is private.

Contact

Tell me what you need built. I will reply with a few questions and a proposal.

I use what you send only to reply to you. Privacy notice