James Kanyingi

I’m a customer-focused graduate with hands-on experience supporting taxpayers at the Kenya Revenue Authority (KRA), handling inquiries, maintaining accurate records, and guiding clients through compliance processes. I’ve built a reputation for clear verbal and written communication, issue resolution, and attention to detail in fast-paced environments.

Since 2025, I’ve been actively engaged in the bug bounty ecosystem (HackerOne, Bugcrowd, and Intigriti), specializing in web application security testing. I conduct in-depth penetration testing and vulnerability hunting, identifying issues such as XSS, authentication bypass, IDOR, misconfigurations, and business logic flaws using both manual testing and custom scripts.

I prepare well-structured vulnerability reports with executive summaries, reproduction steps, risk ratings, and remediation recommendations. I also manage the full vulnerability disclosure lifecycle in line with platform rules, maintain detailed submission tracking in Excel/Google Sheets, and coordinate with developers and program owners to verify findings and drive timely resolution.