Uday Pali

UP

Looking for a job

Uday Pali

@udaypali

Security researcher and bug bounty hunter who published two CVEs and built PentaSec, an AI-assisted pentest reporting platform.

I published two CVEs for authenticated SQL injection and broken access control after validating the issues with maintainers and contributing to fixes. My responsible disclosures also earned Hall of Fame recognition from TU/e, Bayer, and MovieXchange.

I built PentaSec, an AI-assisted pentest reporting platform that standardizes evidence management and cut manual documentation time by 60%. I assess web and API security, develop proof-of-concept exploits, and participate in bug bounty programs on HackerOne and Bugcrowd.

Experience

Work history, roles, and key accomplishments

SE

Current

Independent Security Researcher

Current

Self Employed

Jan 2026 - Present (9 months)

Identified and reported high-severity vulnerabilities, including an authenticated SQL injection and a broken access control issue, both published as CVEs. Built PentaSec, an AI-powered reporting framework that reduced documentation time by 60%.

Vulnerability Research Bug Bounty SQL Injection Broken Access Control Testing CVSS V3.1 Scoring Proof of Concept Development HackerOne Bugcrowd PentaSec AI Reporting NodeJS ExpressJS Python Flask Next.js JWT OAuth

Education

Degrees, certifications, and relevant coursework

PA

Pillai College of Arts, Commerce and Science (Autonomous)

Bachelor of Computer Applications, Full Stack Development

2023 - 2026

Bachelor of Computer Applications (BCA) in Full Stack Development, graduated in March 2026.

Tech stack

Software and tools used professionally

Bugcrowd

HackerOne

Node.js

Next.js

Python

Flask

Burp Suite

Availability

Looking for a job

Location

India

Authorized to work in

Salary expectations

70k+ INR

Job categories

Security Researcher Penetration Tester Application Security Engineer

Skills

Vulnerability Research Web Application Security API Security Testing Penetration Testing Bug Bounty Responsible Disclosure OWASP Top 10 SQL Injection Broken Access Control Testing IDOR Proof of Concept Development CVSS V3.1 Scoring Security Assessment Reporting Evidence Management Reconnaissance Automation

Interested in hiring Uday?

You can contact Uday and 90k+ other talented remote workers on Himalayas.

People also viewed

View all talent

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!