Web Design & Websites
Fast, elegant business websites designed around your brand and built to be secure, accessible and easy to find on Google.
- Corporate and personal websites
- Landing pages and redesigns
- SEO basics, hosting and domain setup
01 — Perspective
I help businesses build reliable websites and software and protect what matters, from the first line of code to the cloud.
Eray UlusoyWeb Designer, Software Engineer & Security Consultant
I — Services
Design, engineering and defensive security
Four disciplines that usually sit with four different vendors. Keeping them together means security decisions are made while the site or system is designed, not after it ships.
Software Development
Custom web applications, APIs and internal tools. Clear structure, tested code and documentation your team can work with after handover.
- Web applications and dashboards
- REST APIs and integrations
- Process automation
Cybersecurity
Penetration testing and vulnerability assessments for websites, applications and networks. Each finding is rated by severity and explained with a clear fix.
- Web application penetration testing
- Vulnerability assessment
- Code and configuration review
Cloud & AWS
Secure foundations on AWS: access control with least privilege, sensible network design and storage that is private by default.
- IAM and access design
- VPC and network setup
- S3 and configuration reviews
II — Approach
A clear method, from first call to handover
Every engagement follows the same four stages, so you always know where the work stands and what comes next.
I.
Understand
Your goals, your current systems and the risks that matter most to your business.
II.
Design
A written plan for the design, architecture and security controls, agreed before any build starts.
III.
Build & Test
Implementation with automated tests, followed by my own attacker-style review.
IV.
Secure & Support
Hardened deployment, documentation and a handover your team can maintain.
III — Engagements
Ways to work together
Fixed-scope engagements with a clear deliverable. Scope and price are agreed in writing after a short introductory call.
Website or application build
A new website, web application or API, designed and built with security reviewed at every stage.
- Typical length
- 2 – 10 weeks
- You receive
- Live site or source code, deployment and documentation
Security assessment
A structured test of an existing website, application or network to find weaknesses before someone else does.
- Typical length
- 1 – 3 weeks
- You receive
- Written report with severity ratings and fixes, plus a retest
AWS readiness review
A review of how your AWS account is set up, focused on access, exposure and the basics that prevent most incidents.
- Typical length
- 1 – 2 weeks
- You receive
- Findings, priorities and a step-by-step remediation plan
IV — About
An engineer who also thinks like an attacker.
I have spent the past four years building websites and software and testing systems for security weaknesses. That combination shapes how I work: I build expecting it to be attacked, and I test systems knowing how they are built.
I now work independently under my own name, which means every client works with me directly, from the first conversation to the final handover. I am currently extending my work into cloud infrastructure through the AWS certification track.
Certification track
AWS Certified Cloud PractitionerCloud concepts, security, core services
In progressAWS Certified Solutions Architect – AssociateSecure and resilient architecture design
PlannedAWS Certified Security – SpecialtyDetection, incident response, data protection
PlannedV — Principles
How I work
Discretion
Your code, your systems and anything I find in them stay confidential. Findings go only to the people you name.
Precision
Clear scope, clear reports and no unnecessary complexity. Every recommendation comes with the reason behind it.
Accountability
One person responsible for the work from start to finish. Nothing is passed on to subcontractors.
VI — Contact
Let's discuss your project.
Tell me briefly what you need using the form, or write to contact@erayulusoy.com. I reply to every enquiry within two working days, and the first call is free of charge.
LocationRemote · Working with clients internationally