We know how attackers think. And we can explain it.

TunaSec is a non-profit. We test companies' security and teach people how to defend themselves. Clearly and without scare tactics.

What connects us

There are five of us, and each came to security by a different road: pentesting, red teaming, infrastructure, development or education. What connects us is curiosity: the need to find out how things work and where they fail.

What we find out, we pass on: to companies, schools and the public. Around the core team is a network of specialists we work with. We are based in Brno and Prague.

Team

Filip Holec

Filip is the chairman of the non-profit organization TunaSec. He is a founder of ENGETO and Nuomy, leading Czech educational institutions and works there as a technical leader. In the past, he worked as a tester at Red Hat and holds multiple professional certifications.

Hacking is an integral part of his life – he applies its principles and mindset to AI, software development, cybersecurity, and lockpicking.

Martin Žember

With over 18 years in IT security, Martin works as a contractor specializing in red teaming, penetration testing, vulnerability analysis, malware research, physical security, and programming.

A regular speaker at conferences across the Czech Republic and Europe, with deep expertise in physical security and lockpicking.

Petr Skyva

A DevOps architect with over 10 years of experience on projects ranging from small companies to corporations with thousands of employees. Currently maintains infrastructure for several enterprise clients.

Brings deep cybersecurity expertise in forensic analysis, cloud service configuration, and production system security.

Marek Šanta

Marek specializes in physical and infrastructure security. He performs physical penetration tests of buildings and cars, with occasional software and network engagements, and researches ways to bypass access control systems. He runs Uncovert and holds a master's degree in cybersecurity management from Masaryk University.

He picked his first lock at 13 and remains a C/C++ developer at heart who loves pushing code to the limits of the hardware. On his blog santomet.eu, he writes about vulnerabilities in locks, intercoms, the TETRA protocol and Flipper Zero.

Matej Janček

Matej is a senior penetration tester at Axians ICT CZ. He previously spent almost four years as a penetration tester at the National Cyber and Information Security Agency (NÚKIB), testing companies' internal infrastructure, and then worked as a senior cyber security analyst at Resideo.

He has been actively hacking with TunaSec since 2022. He studied computer science at Brno University of Technology and especially enjoys social engineering and wireless security. He never says no to good coffee.

Past members

Ján Masarik

Ján specializes in web application security. Currently in Meta security team, previously led security at Kiwi.com, building a team focused on application and cloud security.

Currently based in Italy and serves as one of the leaders of OWASP Czech Republic.