Attorney at law in Denizli, Türkiye (Denizli Bar, registration no. 2858). My practice focuses on IT law, cybersecurity and data protection; I also handle employment, administrative and tax matters. I do security research on WordPress plugins and build tools that let AI assistants work with Turkish legal sources without inventing citations.
- Dayanak: MCP server for Turkish case law and legislation research, where every citation is checked against the official full text.
- Doktor MCP: source-based legal information for physicians on patient rights, informed consent and health data.
- Belgelik: self-hosted legislation reader and document library that splits statutes down to the article and paragraph level.
- Tensip: keeps a local, searchable archive of case files from the UYAP lawyer portal (unofficial).
- Telekumanda: remote control for desktop coding agents from an Android phone, over a private network.
- Seyir: browser extension and MCP bridge that lets a coding agent work only in the tabs assigned to it.
- CVE-2026-110900: missing authorization (CWE-862) in the BookIt WordPress plugin (2.6.0.5 and earlier), reported to the vendor through Patchstack under coordinated disclosure and fixed in 2.6.0.6.
- CVE-2026-111835: missing authorization (CWE-862) in the Swish for WooCommerce payment plugin (3.7.8 and earlier) that let an unauthenticated user change the plugin settings, reported to the vendor through Patchstack under coordinated disclosure and fixed in 3.7.9.
- CVE-2026-48201: unauthenticated stored cross-site scripting (CWE-79) in Fast Velocity Minify (3.5.7 and earlier, about 30,000 active installs), reported to the vendor through Patchstack under coordinated disclosure and fixed in 3.5.8.