Malmö & Varberg, Sweden

Arvid Berndtsson

Information Security Lead & Full‑Stack Developer

I help companies keep data safe and build reliable software. Focus areas: ISO 27001, SOC 2, risk management, data loss prevention, incident response, and modern web apps.

View my work Get in touch

Portfolio

Featured projects

Things I've built — security, dev tools, and web.

Feb 7, 2026

redstr: A Rust-Based Red Team String Transformation and Evasion Toolkit

redstr is a Rust-based red team string transformation toolkit for penetration testing, adversary simulation, and security control validation. It provides composable encoding, obfuscation, and evasion techniques including Unicode homoglyphs, SQL injection helpers, XSS variations, domain typo-squatting, and API-based integration.

securityred-teampenetration-testingrusttooling+3

GitHub

A purple shield with a white checkmark inside it on a white background

Jul 1, 2025

Compliance Simplified

Exploring tools and workflows that make security compliance approachable - governance, awareness, and automation.

securitycompliancegovernance

GitHub Website

Screenshot of the arvid.tech website showing the homepage

Jan 15, 2025

arvid.tech - Personal Website

A modern, performant personal website built with Astro 5, TypeScript, and Cloudflare Pages.

astrotypescriptcloudflaretailwind

GitHub

Jan 1, 2025

Robots.txt Analyzer

Modern robots.txt analyzer with instant parsing, security checks, and best‑practice scoring. Built with Qwik, deployed on Cloudflare Pages with D1.

qwiktypescriptcloudflared1tailwind+1

GitHub Website

View all projects

Testimonials

What people say

Arvid is truly a gem. He is driven, knowledgeable, and incredibly humble. Working with him has been both rewarding and a lot of fun. He is h…

Ines Suhonjic Information Architecture Student at Malmö University

I've had the pleasure of working closely with Arvid Berndtsson over the past two years at Malmö University, where he has contributed signifi…

Anton Tibblin Lecturer at Malmö University

View all recommendations

Blog

Recent thoughts

Writing on security, engineering, and building.

Oct 17, 2025

RAG Architecture Guide for Large-Scale Document Search

Learn how to build a cost-effective, enterprise-grade RAG system. This guide details a 3-stage retrieval pipeline for searching massive document sets.

A surveillance camera graffitied on a concrete wall

Sep 15, 2025

Chat Control 2.0: A Dangerous Path Toward Mass Surveillance

The European Union stands at a critical crossroads in digital privacy and civil liberties. The proposed Chat Control 2.0 regulation, formally known as the Child Sexual Abuse Regulation (CSAR), is one of the most sweeping surveillance proposals ever considered by a democracy. Framed as a child protection measure, it would actually establish an unprecedented mass surveillance infrastructure that undermines the fundamental right to private communication.

Jul 15, 2025

A Practical Guide to Preventing Subdomain Hijacking

Forgetting to delete an old DNS record can leave you vulnerable to subdomain hijacking. Attackers can claim your unused addresses to host malicious content under your brand's name. Learn how to find and fix these dangling pointers with o...

Jun 18, 2025

A History of How We Name Hackers

Why is one hacker group called both FANCY BEAR & APT28? Different security companies use different names, which creates confusion. Here's a quick history of how we got into this mess and how the industry is finally starting to fix it.

View all thoughts

Let's connect

Happy to chat about security, engineering, or ideas.

Say hello About me