Every SPM Tech engagement is run by a certified human who exploits by hand and
translates findings into decisions. These are the people on the other side of
your kill chain.
The team
Meet your adversaries
Decades of combined experience across red teaming, enterprise security architecture,
malware analysis, and AI/LLM security—now pointed at your attack surface, with
your permission.
Operator 01Founder
Altan A.
Founder · Ethical Hacker
Founder of SPM Tech and an ethical hacker with a decade in cybersecurity built on a
software-development background. As a security engineer at a Fortune 100 retailer
he scopes and runs penetration tests across web, mobile, cloud, and internal systems,
threat-models new services, and builds security tooling and automation on AWS and
Azure. Trained through SANS in web app, cloud, mobile, and wireless offensive
security—plus Stanford's AI Security program—he founded SPM Tech to point
that tradecraft at the attack surfaces companies don't know they have.
Senior security engineer whose path runs through six years in the U.S. Air Force,
defense consulting at Booz Allen Hamilton, and application security at a
Fortune 100 retailer, where he focuses on web application penetration testing
and risk management. He holds an active TS/SCI clearance, a Master's in Cybersecurity
and Information Assurance, a SANS Technology Institute graduate certificate in
penetration testing, and a certification stack including CISSP, GPEN, GCPN, GCIH,
GPYC, and CEH.
A decade in security spanning malware analysis, digital forensics, and enterprise
security architecture at a Fortune 100 retailer, where she led application
penetration testing and threat-modeling across large-scale systems. Her current
research focus is AI/ML security—prompt injection and LLM attack surfaces.
She holds a Master's in Cybersecurity from Georgia Tech alongside OSCP+, CISSP,
and CEH, builds her own tooling, volunteers as a DEF CON Goon, and has served
on the red team of the National Collegiate Cyber Defense Competition.
AI security engineer and senior penetration tester best known for vulnerability
research: twice named a Microsoft MSRC Most Valuable Researcher (2023 and 2025),
13× in Microsoft's Hall of Fame and 3× in Apple's, with acknowledgments
from Meta, Samsung, Dell, and AT&T, a second-place global finish with Cisco, and
a published CVE to his name. Ranked among Bugcrowd's top 350 ethical hackers, he
brings frontline bug-bounty tradecraft—increasingly aimed at AI systems—to
SPM Tech engagements.
