# Yashwanth Reddy

Yashwanth Reddy is a remote worker on Himalayas, Independent Security Researcher at Self Employed, based in India.

Source: https://himalayas.app/@yashwanthreddy3

```text
Independent security researcher uncovering web application and API vulnerabilities, with 1,000+ security issues responsibly reported.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 3700k+ INR |
| Job categories | Security Researcher |
| Skills | Web Application Security, Vulnerability Research, Manual Penetration Testing, API Security Testing, Authentication and Authorization, Account Takeover, Broken Access Control Testing, IDOR, Business Logic Flaws, XSS, SSRF, CSRF, SQL Injection, File Upload Vulnerabilities, Session Management |
| LinkedIn | https://linkedin.com/in/yashu-reddy-321554305 |

## About

```text
As an Independent Security Researcher at Self-Employed, I conduct manual security assessments of web applications and APIs. I’ve discovered and responsibly reported 1,000+ vulnerabilities across various organizations.

My research has identified complex flaws involving authentication, authorization, account takeover, and business logic. I test manually to uncover issues automated scanners may overlook.

I analyze HTTP requests and responses, application workflows, session handling, and access-control mechanisms. My work includes API security testing and vulnerability research.

Organizations including Google, Meta, Amazon, Microsoft, NASA, Dell, and Deloitte have recognized my security research contributions. I also reported CVE-2026-25806.
```

## Experience

### Independent Security Researcher

Self Employed

```text
Conducted independent security research and manual security assessments of web applications and APIs. Discovered and responsibly reported 1,000+ security vulnerabilities across various organizations.
```

Skills: Web-Application-Security, Vulnerability-Research, Manual-Penetration-Testing, Burp-suite, OWASP-ZAP, Nmap, Postman, Linux, Kali-Linux, Authentication-and-Authorization-Bypass, Account-Takeover, Broken-Access-Control-Testing, IDOR, Business-Logic-Flaws, XSS, SSRF, CSRF, SQL-Injection, File-Upload-Vulnerabilities, Session-Management, MFA-Bypass, API-Security-Testing, Responsible-Disclosure, OWASP-Top-10

## Tech stack

- Postman
- Linux
- Kali Linux
- Burp Suite
- Nmap
- OWASP ZAP

To contact Yashwanth, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Suman Roy](https://himalayas.app/@sumanroy1): Security Researcher, BugBountyHunter/VDP
- [Rashid Asrar](https://himalayas.app/@rashidasrar): Security Consultant, CyberFort Tech
- [Gobesh Basumatary](https://himalayas.app/@GobeshBasumatary): Penetration Tester / Security Researcher, Freelance
- [Kanishk Dadhich](https://himalayas.app/@kanishkdadhich): Bug Hunter, Bugcrowd
- [prashant sengar](https://himalayas.app/@prashantsengar): Web Application Security Intern, Skill Horizon
- [Milan dhiman](https://himalayas.app/@milandhiman): Independent Security Researcher, HackerOne / Bugcrowd
- [Nikhil Mahala](https://himalayas.app/@nikhilmahala): Independent Security Researcher, HackerOne & Bugcrowd
- [Uday Pali](https://himalayas.app/@udaypali): Independent Security Researcher, Self Employed
- [Shubhankar Gaur](https://himalayas.app/@shubhankargaur): Associate Security Consultant, Payatu
- [Sanath Vyas R](https://himalayas.app/@sanathvyasr): Cybersecurity Analyst, ISECURION Pvt Ltd