01 — PRODUCT STUDIO
Syncopated
Dynamics
My product studio. I build and run my own software, including a drum-timing trainer and security tools.
CREATIVE TECHNOLOGIST / PERFORMER
I build software
and find the security holes in it.
I've spent twenty years building software. Now I help other people make theirs safer.
SCROLL TO EXPLORE ↓ 001
+ 01 01 / ABOUT
About
I’ve been writing software for about twenty years, mostly on systems where mistakes are expensive. Along the way I picked up master’s degrees in software engineering and cybersecurity, plus Security+ and SecAI+.
I’ve also been drumming for over thirty years — drum corps, quads, and a long run playing trash cans in front of theme-park crowds. I still play professionally.
The two aren’t as different as they sound. Both come down to timing, practice, and catching problems before the audience does.
02 / WORK
What I’m
working on.
Syncopated
02 — SECURITY FOR BUILDERS
Security for
builders.
A lot of apps are being built fast with AI tools, and a lot of them have security holes the builder doesn’t know about. I find them and help fix them, in plain English, one at a time.
THE OFFER
SHIELD Audit — find out where your app is exposed and what to fix first — in 7 days. If I don't find anything worth fixing, you don't pay.
From $5,000
Ongoing monitoring — a monthly retainer so new releases don't reopen old holes.
From $1,200 / month
Larger apps get a quote after a short call →SCAN, AUDIT, OR PEN TEST?
- Automated scan
- Minutes. Catches known patterns like exposed keys, missing headers and outdated libraries. It can't tell who is supposed to see what, which is where most AI-built apps go wrong.
- SHIELD Audit
- 7 days. I go through how your app actually handles data: who can see what, logins, keys, AI features, backups. Every finding is ranked and explained in plain English, with a fix, and re-checked once it's fixed. The right first step for most apps built with AI tools.
- Penetration test
- An outside attack on a mature product, usually asked for by enterprise customers or compliance audits. Worth doing after the obvious holes are closed, not before.
RECENT AUDIT / SURFACE REVIEW
- Findings
- 23
- High priority
- 4
- Critical fixes
- 3
All findings were fixed.
From a recent application security review. Details have been generalized to protect client confidentiality.
HOW I HANDLE YOUR ACCESS
- Nothing gets tested until you've approved the scope in writing.
- I'll sign an NDA before I see any code.
- Read-only access wherever your platform allows it.
- Every check is logged, and every finding comes with evidence.
- When the work ends, my access is removed and you rotate anything you shared.
An audit covers the version I reviewed, on the day I reviewed it. It isn't a guarantee against every attack. Keeping it covered after that is what monitoring is for.
NOT READY YET?
A short questionnaire that estimates what a breach would cost your app, itemized like a receipt. Takes about three minutes.
Or paste your app's URL into the free API key check. It looks for secret keys (Stripe, Supabase, OpenAI, AWS) exposed in your site's code. Takes about a minute.
Or talk it through with me03 — SECOND ACTS / PERSONAL NOTE
Second
acts.
For builders, musicians, and creatives figuring out what comes next. I’ve made that change myself, and I’m always glad to compare notes.
Happy to talk it through 03 / WRITING
A FIELD GUIDE / COMING EARLY 2027
The book
Trust me, it’s fine — a field guide to the security problems hiding in AI-built software. Out early 2027.
04 / CLIENT NOTE
From a client
I have a website and wanted to make sure I was doing everything I could to keep it secure, so I reached out to Mike for a security check.
I was already fairly confident that my website was in better shape than many other websites when it comes to security, but Mike was able to confirm that while it was in a good position, there were still some changes and improvements that could be made.
I’m really glad I reached out to him. He was helpful, professional, and made it much easier to understand what I could improve and why those things matter.
We live in a time where security and privacy are more important than ever, yet there are still countless websites that don’t take these things seriously enough. Thanks to Mike’s help, I feel much more confident about the security of my own website — and hopefully, in a small way, we can help make the internet a little safer for everyone.
I can definitely recommend Mike to anyone looking for help with website security.
05 / BOOK A TIME
Book a call
Thirty minutes. Tell me what you’re working on.
AVAILABLE TIMES / M. LANGHANS↗ CALENDLY
Prefer a separate window? Open scheduling page