Reverse engineer. Runtime debugger. Mobile security obsessive.

I’m Cian Gallagher - a mobile application security specialist based in Dublin, Ireland. With over six years of hands-on offensive security experience, I focus exclusively on dissecting and securing mobile applications for iOS and Android platforms. My work goes far beyond surface-level scans or basic pen testing.

Where others rely on automated tools, I dive deep into the mobile app’s internals: decompiling APKs, examining Swift and Objective-C binaries, and testing runtime behavior with advanced tooling. From Frida and Objection to Burp Suite Mobile Assistant and custom scripts, I leverage a full toolkit to mimic real-world attacker tactics; exposing flaws others often miss.

Whether you're a scaling startup about to raise funding or a regulated fintech preparing for audit, I provide testing that’s:

• Manual-first and logic-aware: I identify insecure storage, broken authentication, exposed endpoints, and business logic flaws specific to your app’s flow — not just generic OWASP checks.
• End-to-end: I test your mobile client, backend API, authentication flows, and third-party dependencies to uncover chained vulnerabilities and edge-case issues.
• Compliance-aligned: Reports mapped to MASVS, OWASP Mobile Top 10, and tailored to meet ISO 27001, SOC 2, or investor diligence requirements.

Deliverables include:

• A clear, developer-readable PDF report with annotated findings, PoCs, and screenshots
• Executive summary for stakeholders (plain English, no jargon)
• Optional: live walkthrough call with your dev team
• Optional: post-remediation retest with updated report and validation

Past clients include digital banking platforms, health-tech apps with sensitive patient data, and SaaS products needing high-assurance security before launch. My goal is always the same: to help you find serious vulnerabilities before attackers or auditors do — and guide your team in fixing them fast.

If you’re serious about mobile security and want results that go beyond the obvious, let’s work together.

Note: I never take shortcuts. All work is performed with full confidentiality, ethical rigor, and clear communication. References available on request.