- 🔐 I build security-focused systems, backend defenses, and developer tooling
- 🛡️ Project Admin for SecuScan during GSSoC 2026 — leading contributor onboarding, triage, PR review & security standards
- 🧠 Core Member of the Society of Cyber Security
- 🎯 Focused on web & API security, vulnerability assessment, secure backend architecture and applied cryptography
- 📝 Publishing security projects, assessment reports & technical write-ups
- 🌐 Security testing only on systems I own, authorized targets, or deliberately vulnerable training environments
🔒 SecuScan Local-first security scanning workspace — FastAPI orchestration, React + TypeScript UI, structured findings & a metadata-driven catalogue of 60 security-tool integrations.
|
⚡ conduit High-performance Rust proxy that transforms ChatGPT's web interface into an API — built for speed and reliability.
|
🛰️ nScannerSafe, web-based network recon — non-intrusive port scanning with banner/TLS inspection and risk scoring.
|
💬 WhisprClient-side encrypted messaging prototype — ECDH P-256 + AES-GCM, ciphertext-only storage, encrypted key backups.
|
🤖 autoredAutonomous Red Team Copilot — AI-assisted offensive security operations and automated reconnaissance.
|
Secure backend for a cybersecurity society platform — JWT auth, RBAC, rate limiting, audit logging & hardened defaults.
|
🔬 More projects
- kirtos — local-first, voice-driven AI assistant for macOS
- chess-ai-extension
— Stockfish 16.1 AI extension for Chess.com
- game-dev-open-world — GTA-like open-world engine in C++17 + SDL2 + Metal
- kilo-ai-proxy — OpenAI-compatible FastAPI proxy with multi-model routing
- codex-lb — ChatGPT account load balancer with usage dashboard
- blackbox-proxy — OpenAI-compatible Rust proxy over Blackbox AI
| Domain | Skills |
|---|---|
| AppSec | Web & API security · OWASP Top 10 · AuthN/AuthZ testing · JWT & session security · Rate limiting |
| Tooling | Burp Suite · Nmap · Wireshark · Nuclei · ffuf · Gobuster · OWASP ZAP · Docker · Linux |
| Engineering | Python · TypeScript · Node.js · FastAPI · React · Next.js · PostgreSQL · Redis |
| SecEng | Secure API design · RBAC · Audit logging · Plugin integrity · Threat modelling · Client-side cryptography |
Detailed write-ups and sanitized assessment reports are being organized into dedicated public repositories.
"I only perform security testing on systems I own, authorized targets, or deliberately vulnerable training environments."