I break systems like an adversary —
and rebuild them impenetrable.
I'm Bishoy Emad — a cybersecurity specialist with a criminal-investigation background, focused on web application, API, and AI/LLM security, and red-team methodology. I'm the founder of BRIVOX, where I build secure digital products and security-first systems.
My foundation is full-stack engineering, sharpened by six years in offensive security. As a former police investigator, I read systems the way I once read cases — looking for the assumption everyone trusted and no one tested. I don't just find flaws; I build complete exploitation environments and develop bespoke tooling to prove real impact.
Proven by 80+ responsibly-disclosed critical vulnerabilities and the full compromise of expert-grade enterprise lab environments, I fuse investigative discipline with software architecture — and right now I'm going deep on the next frontier: AI / LLM security and AI red-teaming.
What I Do
Red Team Operations
Authorized, full-scope APT emulation. Complete exploitation environments built to bypass enterprise perimeters and reach objectives like a real adversary.
Web & API Security
Dismantling complex web architectures — deep API authorization hunting, BOLA discovery, and stateful business-logic fuzzing. 80+ disclosed CVEs.
AI / LLM Security
Prompt injection, jailbreaks, agentic tool abuse, model exfiltration, and AI supply-chain risk — securing systems that reason. My primary focus right now.
Secure Engineering
Architecting SaaS platforms, zero-bloat WordPress, headless commerce, and native mobile apps — secure by design from day one.
The next attack surface is intelligence itself.
I'm going deep on AI / LLM security and AI red-teaming — prompt injection, model exfiltration, agentic tool abuse, and the supply-chain risks of building on frontier models. The same investigator's instinct that broke web apps now applies to systems that reason. This is where the next decade of security gets decided.
Experience & trajectory
Capabilities
Offensive
Tooling & Frameworks
Engineering
Standards
Pro-Labs Solved
Verified · Enterprise simulationsFounded, owned, operated
A company and a product line I build and run end-to-end — with the engineering work that powers it.
BRIVOX
UK-registered digital engineering & cybersecurity firm · Founder
A next-gen AI platform — a free in-house model plus premium Claude access, with token-pack pricing.
ai.brivox.tech →
AI-powered ERP with native WooCommerce & Shopify sync and real-time anomaly detection.
nexus.brivox.tech →
Premium, mobile-first e-commerce system with a modern storefront and a fast path to launch.
fluxcart.brivox.tech →A contributor platform for Egyptian-Arabic voice data — the dataset layer for region-aware AI.
lab.brivox.tech →Engineering Works
Delivered under BRIVOXA large, highly-secure SaaS + IoT platform for Sharm El-Sheikh resorts — a fully autonomous operations ecosystem.
LIVEUltra-fast, mobile-first booking platform with a fully decoupled frontend over secured APIs.
LIVEA modernized WooCommerce deployment converted into a native mobile app with extreme performance.
LIVECustom core-control plugin and zero-bloat theme built from scratch with complex business logic.
LIVESecurity Arsenal
Tools I build
A stateful CLI fuzzer for API authorization hunting — fast replay, auth swapping, and a smart comparator for finding BOLA flaws at scale.
An emergency lockdown plugin for WordPress zero-days — instant session purge, API lockdown, and IP safe-room in one click.
Notes from the offensive side
Field notes on web & API security, AI/LLM red-teaming, and building secure systems.
How I'm actually learning this
A working journal of what I study, build, and break — updated almost daily. No polish, just the real path.
Roadmap
Daily Entries
Static, zero-backend by design — no database, no login, no attack surface. To add a day I edit one STUDY_LOG array in the page source and push to git. Exactly as secure as a static file should be.
Initiate an operation
Red-team engagement, security advisory, or a secure build — open a channel. Responses within one business day.