About
Every engagement, done personally.
APTStrike is a new offensive security practice from Tashkent. For now it is one person: the founder works as an individual tester under the APTStrike name, and scopes, tests and reports every engagement personally.
01Team
Who does the work.
- 01[PORTRAIT]
Shahriyor Tursunov
Founder & CEO · Penetration tester
Shahriyor founded APTStrike to bring manual, evidence-based offensive security to teams in Uzbekistan and beyond. While the practice is young, Shahriyor works as an individual tester under the APTStrike name: every engagement, from the first scope call to the retest, is done personally. Reports are written for two readers at once — the engineers who fix and the leaders who decide.
Responsibilities
- Scope calls and written authorization
- Manual testing and exploit validation
- Risk-rated reports with fixes
- Walkthrough calls with your team
- Retests after you patch
- Client communication end to end
Skills
- Application Security
- Network Security Testing
- Cloud Security Testing
- Social Engineering
- Security Build-out
- Manual testing
- Report writing
Certifications
[CERTIFICATIONS]
As the practice grows, new members are listed here with their role and skills.
02Working with one tester
Small on purpose, for now.
- 01
You talk to the tester
The person on the scope call is the person who tests, writes the report and walks your team through it.
- 02
One person knows your scope
Context is never lost in a hand-off. What was learned in reconnaissance is still there at the retest.
- 03
Capacity is honest
Engagements are taken on only when there is time to do them properly, and start dates are agreed upfront.
03Principles
What does not change as we grow.
- 01Signed authorization before every test
- 02Manual testing first, tools second
- 03Every finding proven and reproducible
- 04Free retest once you have fixed