Cybersecurity Researcher & Full-Stack Developer
Securing high-stakes digital assets while building robust, scalable web applications. I find the flaws that put millions of people’s records at risk, then engineer the systems that do not have them.
RESEARCH ACKNOWLEDGED & WORK DELIVERED FOR
I break systems for a living. That is what makes the ones I build hold.
Access-control and authorisation testing
Reports engineering teams can act on
Production web platforms, end to end
Authorisation designed in, not bolted on
Every finding was reported privately to the affected organisation and, where a government system was involved, to Nigeria’s national CERT. Summaries only: no endpoints, payloads or reproduction steps are published here.
Broken access control / IDOR
An unauthenticated document-retrieval path in the Commission's Electronic Document Management System exposed incorporation records and director identity documents. I reported it through ngCERT, and it was validated within 48 hours.
Student data exposure
A critical flaw on the university's platform placed student data privacy at risk. I disclosed it directly to the CTO, and the university confirmed it, remediated it, and awarded a bug bounty.
Payment platform review
My security review of the B-Lord Group fintech application, with findings I reported privately to the product team and handled under coordinated disclosure.
blordgroup.ng
I designed and built the official B-Lord Group website from the ground up: brand system, responsive front end, content architecture, deployment and hardening. It is a public-facing platform for a group whose name carries weight, so it had to load fast, read clean and give an attacker nothing.
Scripts and report templates that turn raw findings into the structured, reproducible reports security teams and national CERTs can act on immediately.
Authenticated web applications with role-based access control, audited data flows, and an authorisation model designed before the first endpoint is written.
Data pipelines and applied-AI infrastructure, written up with the failure modes included: the bugs, the rejected designs, and the measurements that changed my mind.
Semantic duplicate detection and exam forecasting over a ~40,000-question WAEC archive.
A six-stage pipeline turning two decades of WAEC and JAMB papers, from printed booklets to screenshots to inconsistent Word documents, into a classified, queryable corpus.
An event-driven GPU pipeline turning ~96 scanned curriculum textbooks into clean, structured Markdown, unattended, recovering from the failure modes of open-source ML inference at scale.
My secondary school selected me and covered the full cost of attending MILSET Expo-Sciences International (ESI) in Abu Dhabi, one of the world’s largest gatherings of young scientists and technologists, where I showed my technical work alongside delegations from across the globe.
See the full gallery →
Security assessments, responsible disclosure and full-stack engineering.
Tell me what you are working on.