Sinan Turunc
Founder and principal consultant, nandsec
I formed nandsec to provide applied security research and engineering. My focus is vulnerability research, reverse engineering, penetration testing and secure systems engineering, from firmware to cloud services and AI agents. I work with organisations to understand the security challenges they face, and provide the consultancy and engineering they need to address them.
My interests are memory corruption and exploit development, Linux kernel and platform security, and the security of AI agents and developer tooling. Outside engagements I contribute fixes to the Linux kernel and build software in Rust, Go, Python and TypeScript.
| A | B | A NAND B |
|---|---|---|
| 0 | 0 | 1 |
| 0 | 1 | 1 |
| 1 | 0 | 1 |
| 1 | 1 | 0 |
Areas of work
Mission
nandsec is focused on providing accurate and weighted security analysis for your organisation. We recommend vendor software or new tooling only when your organisation needs it to meet a security goal or compliance requirement. At nandsec we systematically analyse every aspect of your business, and help guide and apply the security that is needed and warranted for the problem at hand.
Many cyber security companies are also resellers of vendor software, so their advice often starts from the products they sell. Where it meets the requirement, we consider open-source or free tools and traditional methods, which are often more economical in both the short and the long term.
Another key point across the Australian and broader cyber security industry ecosystem is how it is structured. A security product usually passes through the vendor, a distributor, a reseller and a service provider before it reaches your organisation. Each level serves a purpose, but each adds its own cost, handover and complexity. This structure is well established and hard to change, but much of that complexity is not needed, and security solutions can be deployed with much simpler methods.
nandsec is focused on removing the friction your organisation faces when dealing with security hurdles and with the wider security supply chain. We aim to educate your own staff to manage such tools, so that you do not need to invest significant resources in ongoing administration. If the management or administration of the security engineering of your business processes becomes too cumbersome, we are here to assist you with it.
nandsec takes a different approach in an ecosystem that offers a large number of security products. We focus on dealing directly with people and fixing real problems with real solutions that are measured and precise. This is nandsec's mission: the application of coherent and honest security engineering to your needs.
Contact
- [email protected]
- Start a chat
- Signal
- Start a chat
- SimpleX
- Start a chat
- Security reports
- Disclosure policy
- Enquiries
- Scope an engagement
