Author

Simon Juhel

Co-founder of HELX · Senior cybersecurity consultant

Simon has focused on offensive security since 2018. He performs penetration tests on web applications, internal infrastructure and Internet-facing services. He also takes part in Red Team exercises, combining attack techniques with a close understanding of target environments to assess how well organizations resist. Alongside this, he contributes to architecture audits and trains technical teams on security and remediation topics.

LinkedIn profile

Areas of expertise

Internet exposure assessments
Web application pentesting
Internal penetration testing
Red Team exercises
Architecture and organizational audits
Trainer

Articles

Jorani

Authenticated SQL injection in Jorani

Simon Juhel·February 6, 2026

OWASP Top 10: 20 years of evolving web threats, cybersecurity visual with icons on a blue and purple digital background

PentestWebOWASP•7 min

Twenty Years of the OWASP Top 10: How Web Threats Evolved from 2003 to 2025

A look back at the history of the OWASP Top 10 to understand how web vulnerabilities have changed over twenty years, and to identify the key factors that will shape the security of tomorrow.

Simon Juhel·August 26, 2025

Illustration of cybersecurity threats split between external hacker attacks and web vulnerabilities such as XSS. On the left, a hacker with a firewall and a globe represents external attacks. On the right, a stylized head labeled XSS represents web threats such as cross-site scripting.

GuidePentest•4 min

Web application pentest or external pentest: how to choose the right approach for your business

Should you go for an external penetration test or an application pentest? This guide helps you make the right call based on your objectives, your attack surface and your constraints. Learn the differences, the typical use cases, the decision criteria and how to avoid spending your budget on the wrong test.

Simon Juhel·July 23, 2025

Illustration of a Red Team cybersecurity exercise with physical intrusion, surveillance bypass, and hacking tools

GuideRedteam•16 min

A Complete Overview of Red Team Exercises

Red Team exercises measure how well an organization holds up against realistic attacks. Here is how they work, the key stages, the results you can expect, and why they are a lever for strengthening your cybersecurity.

Simon Juhel·July 4, 2025

Tell us about your project.

Let us talk through your needs and expectations and build the right service for you.