Passionate about breaking and building secure systems. Specialized in Application Security, DevSecOps, and Penetration Testing. Active CTF competitor (Team Hunter).
I am a Security Engineer currently pursuing my B.Tech in CS with a Cybersecurity Specialization at Amrita University (Class of 2027).
I actively compete in CTFs with Team Hunter, ranking in the Top 8-10 in India on CTFtime. I thrive at the intersection of development and security, building tools to automate security workflows and finding vulnerabilities before bad actors do.
Open for opportunities in Application Security Engineering, DevSecOps, and Security Automation.
Enterprise-grade API security learning platform built with FastAPI, PostgreSQL, SQLAlchemy, Pydantic, and Clean Architecture. Designed to teach modern REST API design, authentication, RBAC, defensive cryptography, and OWASP API security.
View on GitHub →Multi-model consensus engine (OpenRouter + Groq) that classifies Semgrep findings as TRUE_POSITIVE, FALSE_POSITIVE, or NEEDS_REVIEW — reducing SAST noise so developers fix real vulnerabilities.
View on GitHub →AI security tool designed to detect and prevent prompt injection attacks, jailbreaks, and adversarial inputs targeting LLM-powered applications.
View on GitHub →Burp Suite extension for detecting Broken Access Control vulnerabilities through request mutation, replay, and response analysis.
View on GitHub →Deliberately vulnerable Django app with SAST (Semgrep), SCA (Trivy), and DAST (OWASP ZAP) in GitHub Actions CI. Auto-creates GitHub Issues from findings.
View on GitHub →Real-time interview environment verification platform with desktop attestation, live security monitoring, and interviewer dashboard.
View on GitHub →Chrome extension that scans quiz text/screenshot and shows tiny answers in a customizable bottom bar. Works with Groq, OpenRouter & Gemini keys. Force-copy + CopyQ for locked quiz sites.
View on GitHub →Automated ticket monitoring bot with Telegram notifications using Playwright for browser automation.
View on GitHub →Auth log analysis tool for detecting brute force attacks, credential stuffing, and suspicious login patterns.
View on GitHub →Intrusion Prevention System using Scapy and NetfilterQueue for real-time packet inspection and blocking.
View on GitHub →A daily deep-dive into Application Security — from PortSwigger labs and bug bounty recon to Hack The Box machines and DevSecOps hardening. Real learning, documented every step of the way.
Hands-on exploitation across Web Security Academy categories with detailed notes and automation scripts.
Recon playbook with subfinder, amass, httpx and a 5-step vulnerability discovery attack flow framework.
Docker CLI, container hardening, Trivy image scanning, and Kubernetes security fundamentals.
HTTP request lifecycle, OSI model deep-dive, DNS/CDN/LB architecture, and protocol security analysis.