At Payatu, I direct end-to-end security assessments across web, API, mobile, and thick-client applications, producing business-impact reports and reproducible proof-of-concept exploits. I previously conducted penetration tests at Tata Consultancy Services, finding vulnerabilities including RCE, SQLi, IDOR, and SSRF.
As an independent researcher on HackerOne and Bugcrowd, I’ve earned $19K+ in bug bounty rewards and received coordinated-disclosure acknowledgments from NASA, the U.S. Department of Defense, and other organizations. I also created Unifuzz, a Unicode fuzzing toolkit, and ADBSee, a browser-native Android/ADB workbench.
