Ahmet Akan
CEO at Blackbox Security - Technology & Cyber Security Think Tank
Istanbul, Türkiye Turkey
Summary
👤
Senior🎓
Top SchoolAhmet Akan is a seasoned application security leader and founder with over a decade of experience building DevSecOps programs and automating S-SDLC tooling like SAST, DAST, and SCA across web and mobile platforms. As CEO of PeakCyber Technologies and former DevSecOps Team Lead at Trendyol, he blends hands-on secure development in Java, Go, .NET, and Python with strategic security operations at scale. He has practical penetration testing experience and a track record of improving detection capabilities, notably contributing C# security rules to the widely used semgrep-rules repository to catch insecure deserialization, OS command injection, ReDoS and SSRF issues. Known as an “Application Security Enthusiast” on GitHub, he bridges R&D, engineering leadership, and community-driven tooling to harden modern software. Based in Istanbul, he pairs startup agility with enterprise-grade security practice and a knack for turning vulnerability research into automated, repeatable defenses.
8 years of coding experience
2 years of employment as a software developer
Engineer's degree Computer Engineering, Engineer's degree Computer Engineering at Karabuk University
İngilizce, Turkish
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (10)
program-analysis10
it-security10
static-analysis10
csharp10
dotnet-core10
security10
security-scanner9
security-scan9
ssrf9
semgrep8
Programming languages (6)
Github contributions (5)
semgrep/semgrep-rules
May 2021 - Sep 2021
Semgrep rules registry
Role in this project:
Security Engineer
Security EngineerContributions:6 commits, 21 PRs, 2 comments in 3 months
Contributions summary:Ahmet's primary focus was on identifying and mitigating security vulnerabilities within C# code. Their contributions include adding rules to detect insecure deserialization using various formatters and identifying OS command injection and ReDoS vulnerabilities. They also updated existing SSRF rules, demonstrating a focus on improving the project's ability to detect and prevent security flaws.
securitysemgrepsemgrep-rulessemgrep-registryprogram-analysis
ahmetak4n/radar
Apr 2021 - Apr 2022
Scanner for misconfigured DevSecOps or Security tools on internet like SonarQube, GoPhish etc.
Contributions:1 release, 56 commits, 28 PRs in 1 year
methodologyvulnerability-scannerssecurity-scannersecurity-toolsvulnerability-scanner
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.