I hack startups for fun β building them, and breaking them.
- π€ AI
- βοΈ Blockchain
- π΅οΈ Security
const jordan = {
role: "Full-stack & AI engineer / founder",
based: "Amsterdam, NL π³π±",
building: ["AI-native products", "web3 infra", "the odd 4am side project"],
security: "LFI β root, IDOR, and other responsibly-disclosed rabbit holes",
motto: "idea β prod, fast",
};I like turning ambiguous ideas into shipped software β fast. Most days that's TypeScript, Next.js and Python glued to LLMs and on-chain data; some days it's reading someone else's source code they didn't mean to expose. π΅οΈ
| Venture | What it does |
|---|---|
| π SAM | Turns pitch decks into scored, structured investment assessments |
| π£οΈ Max | AI sales assistant that logs meeting notes straight into the CRM |
| π₯ Firestarter | Unifies CRM + marketing + analytics and executes revenue actions |
| ποΈ Tendwise | AI that helps public bodies evaluate & award procurement tenders |
π΅οΈ Security research (click to expand)
I break things with permission and write it up. A few favourites:
- LFI β root cloud access β walked an unauthenticated file-read bug up to root credentials, strictly read-only, responsibly disclosed β write-up
- HOR Berlin DJ contest β a WordPress voting plugin with zero rate limiting β write-up
Everything is disclosed and patched. Proving impact is enough β abusing it isn't.




