Mic Whitehorn

Principal Security Consultant

About Mic

Meet Mic Whitehorn, a 20+ year industry veteran and subject-matter expert in software and web technologies. His expertise extends to working with widely-used technologies such as Next.js, cloud architecture, and container orchestration. Leveraging his in-depth understanding of application and browser behavior, Mic has been instrumental in safeguarding critical systems and sensitive data for his clients. Mic’s production development experience spans web apps, desktop applications, and system utilities, across a wide variety of programming languages and frameworks. 

Having the heart of an AppSec Engineer, he approaches security challenges from multiple angles, providing unique insights and actionable recommendations. His belief in the power of collaboration has led him to forge strong partnerships with defenders and builders, ensuring a holistic approach to cybersecurity that effectively mitigates risks. Through accessible training sessions, he shares his knowledge on secure coding methodologies, advanced web proof-of-concept development, and securing microservice API architecture, inspiring developers to think about threat models in their day-to-day.

Upcoming Conferences

MAY
17

OzCon

Overland Park, KS

Slides and Materials

Using SamuraiWTF for Better Application Security Labs
Secure Ideas Webcast

Forgotten Inputs
Finding Web App Flaws By Understanding The Dev’s Mind

Garbage In, Garbage Owned
Offensive Testing Strategies for AI Systems

Posts by Mic

The Secret Handshake – Covertly Redirecting Mobile Traffic to a Different Backend

The Secret Handshake – Covertly Redirecting Mobile Traffic to a Different Backend

Learn how to covertly redirect mobile app traffic to different backends during penetration tests, overcoming common challenges with Burp Suite and mitmproxy....
Understanding Garbage Findings

Understanding Garbage Findings

Learn how to identify garbage findings in penetration testing reports by evaluating real risk, impact, and conditions in application security assessments....
What’s new in the OWASP Proactive Controls for 2024

O que há de novo nos Controles Pró-Ativos da OWASP para 2024?

Este artigo discute os controles pró-ativos da OWASP Top 10 e as principais preocupações de segurança para desenvolvedores....
What’s new in the OWASP Proactive Controls for 2024

What’s new in the OWASP Proactive Controls for 2024

"Exploring OWASP Top 10 controls and app security for developers...
Many Hands Approach To AppSec

Many Hands Approach To AppSec

Discussion on practical strategies for rolling out an effective application security program and balancing security with development efficiency....
Tartar Sauce for your Phishing Program

Tartar Sauce for your Phishing Program

Ready-to-go open-source resources to refine your phishing awareness campaigns. These tools will help combat security risk while not being overly intrusive....

Message Mic

Have a question about an engagement, a conference talk, or just want to say hello?
This goes directly to Mic, not a general inbox.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.