Digital Investigation
Open-source intelligence, digital footprint analysis, threat mapping and attribution.
Learn more →
STATUS OPERATIONAL
NODE heric.bz
CH SECURE
Heric Baldez
▸
$ whoami
offensive security & digital investigation
$ cat ./focus.txt
- penetration testing, red team & bug bounty
- OSINT & digital forensics
- AI security & vulnerability research
$ ./engage
Scroll
uptime
5+
years operating
challenges
50+
CTF solved
scope
100%
authorized & ethical
status
OPEN
taking engagements
capabilities // 01
What I do
DI
PT
Penetration Testing
Web apps, APIs, network infrastructure and mobile — finding what others miss.
Learn more →
DF
Digital Forensics
Evidence collection, incident response, artifact analysis and chain of custody.
Learn more →
RT
Red Team Ops
Adversarial simulation that tests your real defenses — not just your assumptions.
Learn more →writing // 02
Latest Research
Vulnerability Research
The Million-Dollar Bit
A mega-bounty is the market's confession of what it considers scarcest. The price is the fear, made legible.
Read article
Vulnerability Research
The Machine Talks Too Much
I spent two months pointing AI at code to find security flaws. It finds vulnerabilities with terrifying ease, almost none of them are real, and the difference isn't in the model.
Read article
Vulnerability Research
The Machine That Reads Code
Inside AI-driven vulnerability discovery — the Carlini Loop, the collapse of the verification bottleneck, and what it changes for the people who hunt bugs.
Read article
signal // 03
Featured & Interviewed
YT · @AyrtonYamin
"Your data is at risk" — a professional hacker explains
A long-form conversation on digital security, real-world risk and how everyday systems quietly expose their users.
Watch the interview
YT · @CanalPodtecno
Hacking, digital investigation & forensics: the unvarnished truth
How attackers actually operate, where the real vulnerabilities live, and the OSINT methods behind modern investigations.
Watch the interview
ready to start
Have a security problem worth solving?
Vulnerability assessment, red team engagement, or a digital investigation — share the scope and I'll come back with concrete next steps.