Field notes

About

Take what is useful. Challenge the rest.Qui Audet Adipiscitur...Who Dares Wins

I lead an enterprise penetration-testing practice. The work has grown beyond the test itself, but I still want to know what a system actually did, why the evidence supports the conclusion, and whether another practitioner could challenge it.

That technical judgment has to hold across a team. My responsibility is to set direction, develop people, and make the practice useful to the engineers and leaders who have to act on its work.

My independent projects take the same curiosity into AI-assisted security and systems design.

Portrait of Rob Hunter in a dark jacket

My path

Building a practice without losing the craft.

A diagram can tell you how a system is supposed to behave. Hands-on testing taught me to find out what it actually does, then explain the difference in a way someone else can act on. Earlier work in databases and business intelligence taught me to look for the relationships between the system, its data, and the decision it supports.

Leading a practice means building that judgment beyond one person. The method, the people, and the follow-through around a test all have to work together. A validated result must reach the teams who can address it; a program has to make that path reliable without losing the technical detail that made the result worth acting on.

AI-assisted testing brings a new version of that challenge. An agent can explore quickly; the harder work is deciding what its candidates mean, which ones a person can validate, and how useful results enter an enterprise workflow. I am evaluating tools and operating approaches against those questions, not claiming the work is finished.

RobHunterLabs on GitHub is where I share the independent code and supporting artifacts behind selected field studies. This site is where I tell the story, including what changed my mind.

Layered charcoal plates lifting to expose an oxide-red underside

Why I share it

Security testing is just the beginning...

I share the work so you can examine it, use what helps, and challenge what does not. The articles lead with the question and the result; supporting code and records make the method available where it is ready to share. If the evidence changes my view, that change belongs in the story too.

Explore the writing ↗

For my professional background and current role, connect with me on LinkedIn.