Security researcher focused on bug bounty programs, responsible disclosure, and practical open-source security review.
- Web application and API security
- Reproducible vulnerability research
- Secure code review and automation
- Clear, actionable reports for maintainers
- Respect program scope and rules
- Minimize impact and protect user data
- Report privately through the project's official security channel
- Allow maintainers reasonable time to remediate before disclosure
Building skills through authorized testing, open-source analysis, and responsible reporting.
For security reports, use the affected project's published security contact or GitHub Security Advisories. Do not post sensitive findings in public issues.
