Aka Freakyclown
Co-CEO And Co-Founder, Head Of Ethical Hacking at Raytheon UK
Las Vegas, Nevada, United States
Summary
👤
SeniorAka Freakyclown is a seasoned ethical hacker and co-founder who has spent over a decade turning offensive security research into practical protections for banks, FTSE100 companies and government agencies. As Co-CEO and Head of Ethical Hacking at Cygenta and former Head of Cyber Research for Raytheon UK, he blends hands-on penetration testing, social engineering and physical assessment expertise with strategic security leadership. Known for demonstrating real-world weaknesses across hundreds of facilities, he helps organisations harden personnel, physical and digital controls against sophisticated adversaries. His open-source contributions to the ZAP community include targeted passive scan rules and exploit scripts that reduce false positives and expose complex web-app issues, highlighting a pragmatic emphasis on tool-building. Aka frequently speaks at conferences, creates educational content for platforms like Pluralsight, and co-founded local hacker spaces to demystify security for diverse audiences. Based in Las Vegas, he pairs an intelligence-community-calibre background with a public-facing drive to teach and improve defensive posture at scale.
12 years of coding experience
English, python
Github Skills (17)
userscripts10
javascript10
penetration-testing10
scripting10
audit10
regular-expression10
information-security10
script10
audit-logging10
code-auditing10
auditing10
audit-trail10
vulnerability-scanners9
http-header9
scanning9
Programming languages (4)
Github contributions (5)
zaproxy/community-scripts
Jan 2015 - Apr 2015
A collection of ZAP scripts and tips provided by the community - pull requests very welcome!
Role in this project:
Security Engineer
Security EngineerContributions:39 commits, 4 PRs, 34 pushes in 3 months
Contributions summary:Aka contributed a series of scripts designed for security analysis within the ZAP (Zed Attack Proxy) framework. Their work included creating and updating passive scan rules to detect vulnerabilities, such as the exposure of email addresses, HTML comments, and sensitive server information (X-Powered-By and Server headers). They also developed scripts to identify potential risks like credit card disclosures, relative path overwrites (RPO), and HTTPOnly cookie misconfigurations, with improvements including file-type checks to reduce false positives and the addition of Luhn checks. Furthermore, they created a targeted script to exploit ElasticSearch, demonstrating proficiency in identifying and addressing web application security concerns within a penetration testing context.
sarifpull-requestswelcomezapstatic-analysis
freakyclown/flag_standard
May 2021 - Jun 2021
An attempt to get some standards around option flags in command line tools
Contributions:3 commits, 2 PRs, 5 pushes in 7 days
command-line-toolflagscommand-line-toolsstandardsoption
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.