I've responsibly disclosed 400+ validated security vulnerabilities to organizations including NASA, Cisco, Sony, Red Hat, PayPal, Lenovo, WHO, Anthropic, and PortSwigger. I ranked #1 globally on HackerOne's Vulnerability Disclosure Program leaderboard in 2026.
As a Security Researcher on HackerOne and Bugcrowd, I investigate web applications, mobile applications, and APIs for access control, authentication, business logic, injection, privilege escalation, and remote code execution issues. I work directly with security teams and engineers through validation and remediation.
At Yeti Cyber Operations, I led web application and API assessments, combining manual offensive techniques with AI-assisted analysis to improve discovery and validation. I prepare penetration-testing reports with proof-of-concept demonstrations, risk assessments, and remediation recommendations.
I've also delivered freelance penetration testing across source code, cloud configurations, and third-party integrations, including remediation retesting. Outside client work, I compete in CTFs and penetration-testing challenges, earning wins at NCHL Penetration Testing Competition 2025 and HackQuest 2026.
