At SMAC-X Inno Labs Private Limited, I conduct end-to-end VAPT across web, mobile, API, and thick client applications, from manual exploitation through reporting and retesting. I validate findings such as IDOR, authentication bypass, and injection flaws, then provide CVSS-scored reports with proof-of-concept and remediation guidance.
I also perform network penetration testing, secure source code review, and cloud security assessments. I configure and tune WAF rules, and integrate Semgrep and GitHub Actions security gates into CI/CD pipelines to catch vulnerable code before release.
Previously, at Pqxel Inc., I performed VAPT across enterprise applications and assessed security before and after deployment, including retesting fixes. In earlier roles at Strobes Security (WeSecureApp) and Kleap Institute of Information & Technology, I contributed to web and API testing, mobile security testing, and malware behavior and network traffic analysis. I hold the Certified AppSec Practitioner (CAP) and Kleap Certified Pentester certifications, and I'm pursuing OSCP.
