Work

Bug bounty profiles and public platform signals.

Public profile links are listed directly. Private reports, program names, and sensitive bounty details stay off the site.

Profiles

Live bug bounty stats.

Public aggregate signals from each platform, synced automatically. Private report and program details stay off the site.

Public stats · synced Oct 25, 2026 16:00 UTC

Selected work

Public findings and privacy-safe case studies.

Published material links to its source. Confidential work is reduced to vulnerability class, impact boundary, and method.

01
Public report public

Public HackerOne disclosure

A disclosed report involving exposed test/integration API behavior, linked only because it is already public.

HackerOne report #745171
  • web
  • api
  • disclosure
02
Bug bounty private

Authorization bypass in multi-tenant API

Private disclosure. Rendered as an abstracted case study to avoid exposing target or report details.

Private program · Impact confirmed
  • api
  • auth
Private details withheld
03
Confidential confidential

Security assessment for production web/API surface

Confidential engagement. Shown only as category-level experience without target, exploit, or client identifiers.

Confidential · Web and API
  • web
  • api
  • assessment
Private details withheld