About me
Cybersecurity Professional
A cybersecurity professional specializing in Web Application Security, API Security, and Penetration Testing. I'm focused on finding real-world vulnerabilities, validating their impact, and helping organizations make better security decisions.
That is where I come in. I approach security from an attacker's perspective, combining hands-on testing with a business-focused mindset. From identifying vulnerabilities in applications and APIs to delivering clear, actionable security findings, I focus on turning technical weaknesses into practical improvements.
/ HOW I WORK
A structured security testing approach designed to uncover meaningful vulnerabilities, validate their impact, and give your team clear actions to strengthen security.
01
Define scope, objectives & attack surface.
02
Discover vulnerabilities across the attack surface.
03
Deliver evidence-backed findings and remediation guidance.
04
Confirm fixes and close the security loop.
EXPERTISE
Hands-on security testing across web, API, infrastructure, and cloud — with a focus on manual validation and practical risk assessment.
Skill Radar
Proficiency Breakdown
Levels reflect hands-on experience and practical application.
/ TECHNOLOGY STACK
I use a practical security toolkit across web applications, APIs, infrastructure, cloud environments, and offensive security assessments — selecting the right tools for the target, not the other way around.
Burp Suite
Web Proxy
Caido
Web Proxy
Nuclei
Vulnerability Scanner
Nessus
Network Scanner
ffuf
Fuzzer
BloodHound
AD Recon
Ghidra
Reverse Eng.
Cloud Platform
Azure
Cloud Platform
Active Directory
Identity & Access
Python
Scripting
MySQL
Database
MongoDB
Database
/ Background
From enterprise security to independent research — each chapter shaped how I test, assess, and protect applications.
Tata Consultancy Services (TCS)
Working in an enterprise cybersecurity environment with a focus on security assessment and application/API security. Applying practical penetration-testing knowledge to identify vulnerabilities, assess security risks, and support stronger security practices.
Webhibe Technology
Gained hands-on experience in cybersecurity and security assessment, developing practical skills across vulnerability identification, penetration testing, and application security.
Independent / Freelance
Conducting authorized security research and client-focused VAPT engagements across web applications and APIs. Completed 10+ VAPT projects, while researching and responsibly reporting vulnerabilities discovered across real-world platforms.
/ LET'S TALK SECURITY
Tell me about your application, API, or security requirements. Let's discuss the right testing approach and next steps.