Security at CyberHorizon.

Gergő Szabó

Founder & CEO | Security Engineering & Offensive Security Lead
KiberHorizon Kft. (CyberHorizon)

Gergő leads CyberHorizon's security engineering, offensive security, and technical security strategy, overseeing penetration testing, red-team engagements, security architecture, infrastructure protection, and vulnerability research.

Professional Background

His professional background includes investigative and technical security work with the Budapest Police Headquarters (BRFK), spanning criminal investigations, digital forensics, open-source intelligence (OSINT), investigative software development, and secure systems engineering and administration.

He has also worked as an Information Security Expert at Raiffeisen Bank, gaining experience in information security within a regulated financial institution.

This combination of investigative, engineering, and financial-sector security experience informs CyberHorizon's approach to offensive security, defensive architecture, and evidence-driven security assessments.

Security architecture and infrastructure hardening

Review trust boundaries, access controls, system configuration, and network segmentation to reduce exposure.

Application and API security assessments

Assess authentication, authorization, input handling, and data exposure across application and API boundaries.

Network and infrastructure penetration testing

Evaluate exposed services and attack paths within an agreed scope, documenting impact and remediation steps.

Red-team operations and adversary simulation

Exercise agreed attack scenarios to assess prevention, detection, and response under documented rules of engagement.

Vulnerability identification and remediation validation

Investigate weaknesses, prioritize findings by impact, and retest fixes to confirm that the underlying issue is addressed.

Secure development and CI/CD practices

Integrate security review, dependency checks, secret handling, and controlled changes into development and delivery workflows.

Monitoring, detection engineering, and incident response

Develop monitoring and detection logic, investigate security signals, and support incident containment and recovery.

CyberHorizon conducts security assessments against its own infrastructure and products, as well as client environments under explicit authorization. Penetration testing and red-team engagements operate within defined scopes and documented rules of engagement, with findings communicated through appropriate reporting and remediation processes.

Security researchers who identify potential vulnerabilities affecting CyberHorizon-owned systems can report them directly to Gergő Szabó.

What to include

• The affected system, URL, or component.
• A description of the issue and its potential security impact.
• Steps to reproduce, with a minimal proof of concept and relevant, redacted evidence where available.
• A contact address for follow-up questions.

Research boundaries

This disclosure channel does not grant authorization to test systems. Obtain explicit permission before conducting an assessment. Limit any evidence to what is necessary to demonstrate the issue; do not access, modify, or disclose other people's data, disrupt services, or extend testing to client or third-party environments without their permission.

Coordinating a report

Please report findings privately and allow time for investigation and remediation before publishing technical details. Do not include credentials, personal data, or other sensitive material in the initial email; describe the issue so an appropriate way to share further evidence can be agreed.