Who I Am
I am a Microsoft Data Platform MVP, MCSE, and seasoned SQL Server DBA based in Cluj-Napoca, Romania.
With over 14 years in large, mission-critical production environments, including substantial cross-platform experience with Oracle tuning, I specialize in query performance optimization, SQL and database development, database security, and automation.
Beyond traditional administration, I bring a unique edge to every project by combining deep database knowledge with an attacker’s perspective on security, validated by my OSCP (Offensive Security Certified Professional) and PNPT (Practical Network Penetration Tester) certifications.
What I Solve
I bridge the gap between database administration, development, and system security.
I help organizations eliminate query performance bottlenecks, reduce Azure spend, develop robust and scalable T-SQL, secure vulnerable database environments, and replace tedious manual operations with reliable automation.
My goal is to make data environments faster, cheaper to run, harder to breach, and easier to maintain.
Core Expertise
- Query Performance Optimization (execution plan analysis, index tuning, wait statistics)
- Database Development (T-SQL code review, stored procedure optimization)
- Database Security (hardening, vulnerability assessments, access controls)
- PowerShell and T-SQL Automation (maintenance scripts, deployment pipelines, monitoring)
- Cross-Platform and Cloud Tuning (SQL Server, Oracle, Azure SQL Database and Managed Instances, Google Cloud SQL for SQL Server)
Security Research & Recognition
My security research extends beyond database administration to critical infrastructure components.
I have identified and responsibly disclosed vulnerabilities in products from industry leaders, including:
- Palo Alto Networks: Acknowledged researcher for critical vulnerability disclosures.
- Accenture: Recognized contributor via their responsible disclosure program.
- IBM: Recognized researcher via HackerOne’s responsible disclosure program.
Community Contributions
I actively give back to the tech community by building tools that simplify database management:
- PSBlitz: A comprehensive PowerShell tool designed for rapid and complete SQL Server diagnostics.
- SQL Server Scripts: A collection of T-SQL and PowerShell scripts used to speed up various SQL Server tasks.
- sp_SQLPasswordAudit: A stored procedure that checks your logins’ passwords against known password lists to identify potentially high-powered logins with weak passwords.
- SSMS-Tools: A collection of PowerShell utilities for SQL Server Management Studio related tasks:
- Credential extraction and decryption for saved SSMS 21/22 connections.
- Migration script for moving saved connections from SSMS 21 to 22 (the only method currently available since Microsoft does not provide native migration support).
I’m also a contributor to other well-known projects, such as Brent Ozar’s SQL Server First Responder Kit (my contributions include adding compatibility with Google Cloud SQL for SQL Server’s platform-specific quirks), and Microsoft’s official SQL Server documentation.
Additionally, I contributed a new module to hashcat for cracking SQL Server 2025’s new hashing algorithm, enabling security teams to test for weak login passwords on SQL Server 2025 instances as well as on Azure SQL MI.
Get In Touch
If you want to get in touch, feel free to use this contact form.
Alternatively, reach me directly at [email protected] or connect on LinkedIn.