Bug hunting
I enjoy testing websites and web apps for security vulnerabilities and figuring out why something behaves in a way it should not.
Finding the flaws others miss.
I combine hands-on testing with AI-assisted research to uncover web and API vulnerabilities, explain the risk, and help teams fix the root cause.
RESEARCH IMPACT
Security research with measurable impact.
I’ve helped more than 100 organizations strengthen their security and received credit for over 60 CVEs.
View HackerOne profile- 100+
- organizations helped secure
- 60+
- CVE credits
Organizations I’ve helped secure
- Visa
- Stripe
- Shopify
- Mozilla
- BMW
- Epic Games
- DoorDash
- Xiaomi
- HackerOne
- Fastly
- Elastic
- Bitwarden
HackerOne competitions and live events
I’ve represented India and Nepal in the Ambassador World Cup and taken part in the h1-2010 Open Live Hacking Event.
- 2nd place
Ambassador World Cup
Represented India in 2022
- 3rd place
Ambassador World Cup
Represented Nepal in 2023
- Participant
h1-2010 Open Live Hacking Event
HackerOne live hacking event
Responsible disclosure
When I find a valid issue, I report it privately with clear steps so the team can understand and fix it.
Sharing knowledge
I share useful lessons and writeups so other hunters and developers can learn from them.
Security skills
Web & API
- OWASP Top 10
- OWASP API Security Top 10
- REST & GraphQL
Identity & access
- Authentication & authorization
- IDOR
- JWT · OAuth/OIDC
Vulnerability research
- Business-logic flaws
- SSRF & XSS
- Attack-surface analysis
- Fuzzing
Tooling & automation
- Burp Suite
- Nmap & ffuf
- Linux
- Python & Bash