~ whoami

Independent security researcher · cybersecurity systems engineer on critical infrastructure. I find vulnerabilities by reading source, work the seam where AI systems meet offensive and defensive security, and build security education that doesn't require English to enter.

~/focus

~/operations

chanakya-opsec ⭐ 3 multi-layer OPSEC failure analysis — how operational security actually breaks	bheeshma ⭐ 2 runtime telemetry for npm dependencies — watches what packages do, not what they claim	vaathi ⭐ 21 open-source cybersecurity learning OS — zero to practitioner, in your own language
dvai ⭐ 5 Damn Vulnerable AI Ecosystem — zero-infrastructure red-team range for AI systems	distill ⭐ 4 cuts LLM input cost 40–75% with repo-aware token reduction	Information-Security-Tasks ⭐ 180 daily infosec problem statements — forensics, OSINT, malware analysis, red and blue team

_{The names are the thesis — chanakya the strategist, bheeshma the guardian, vaathi the teacher. Old disciplines, new attack surface.}

~/track-record

Bug bounty across HackerOne, Bugcrowd, Immunefi, Code4rena and YesWeHack — findings argued from source, not scanner output. BalCCon2k18 (Novi Sad): hybrid-cloud red teaming against Azure AD.

~/signals

X · @bbinfosec  ·  ORCID · 0009-0001-7412-0211  ·  India