Raduan Ahamed

I’m a Web & API penetration tester and AI/LLM security engineer, focused on turning real vulnerabilities into actionable, evidence-backed remediation. I’ve implemented detections for common classes like BOLA/IDOR, JWT issues, CORS misconfigurations, hardcoded secrets, path traversal, command injection, file upload flaws, and rate-limiting problems.

In my work, I combine OWASP methodology with deterministic security analysis and AI support—so recommendations are grounded in verified findings. I’ve also integrated testing for OWASP Top 10 and OWASP API Top 10 alongside AI/LLM security patterns, including prompt injection, jailbreak testing, LLM threat modeling, and AI trust boundaries, supported by Python-based security automation.

I build tooling and share outputs: I developed open-source offensive security utilities like RASTT and PathTravScan, including recon, access-control validation, scanning, and evidence reporting workflows. I also created a full-stack repository scanning dashboard and an AI-powered security code review platform (Sentinel AI), aiming to help testers reduce repetitive work while improving confidence through structured reports.