Ankur User

I've conducted web application penetration testing for clients across multiple industries since 2019, identifying vulnerabilities and helping improve application security.

For TCC Global Group's Suntory Oceania project, I performed manual OWASP Top 10 testing, reconnaissance, validation, and exploitation using Burp Suite Professional, OWASP ZAP, Nmap, and supporting tools. I delivered detailed findings and remediation recommendations while working with development teams to validate fixes.

During my cybersecurity internship at Boston Institute of Analytics, I completed six enterprise cybersecurity projects spanning threat intelligence, secure network architecture, IoT security, secure messaging, vulnerability validation, and cybersecurity framework implementation.

I also report vulnerabilities through responsible disclosure and bug bounty platforms including HackerOne, Bugcrowd, OpenBugBounty, and Intigriti. My work includes CVSS-scored reports, proof of concept development, remediation guidance, and security re-testing.