Iheb Ennachet founded Evosec Consulting on a simple conviction: the people who build your software should be the same people who know how to break it — without the consultant theater.
From Sousse, Tunisia. Iheb started coding as a kid, shipped his first production web apps as a teenager, and got into security the way most developers do — by finding out how badly his own early code could be broken. Two decades later he still does both, every week: building web applications and mobile apps for clients, and attacking them before release.
As a developer, his day-to-day stack is Laravel and Next.js on the web, React Native and Flutter on mobile — with Swift and Kotlin when a product needs to go native. He has architected multi-tenant SaaS platforms, fintech onboarding apps, B2B marketplaces and e-commerce storefronts, and he cares as much about a clean data model and a 95+ Lighthouse score as he does about a clean pentest report.
As a penetration tester, known in the security community as 0xdeadbeef and 0xslayer, he covers the full offensive stack: web and mobile application testing, API security, wireless, reverse engineering, malware analysis and red team operations. That combination — an engineer who understands the attacker's mindset — is the whole reason Evosec exists.
You'll see his name written both ways — Iheb Ennachet on official documents, Iheb Nachet on many profiles and among French-speaking colleagues. Same person. Today he runs Evosec Consulting, leads product builds for clients in France and the USA, performs hands-on security engagements, and contributes to open-source projects. He's a strong believer in data privacy, individual data ownership, and the Free & Open-Source Software (FOSS) movement. The majority of his personal setup runs on open-source software.
Want to chat or discuss a project? Reach him directly at iheb.ennachet@devsolve-agency.com or on WhatsApp at +216 55 737 390.
