About Me

My journey in cybersecurity started with a passion for understanding how systems work and, more importantly, how they can be broken. I realized early that the best defense comes from thinking like an attacker—anticipating vulnerabilities before they're exploited.

Over the years, I've helped 25+ organizations across various industries—from fintech startups to established SaaS companies—identify and remediate critical vulnerabilities. I've ranked in international CTF competitions (Black Hat USA, Iran Tech Olympics) and actively participate in bug bounty programs on platforms like Bugcrowd, YesWeHack, and Intigriti.

What sets me apart is my commitment to going beyond automated scanners. I manually test every application, analyze business logic flaws, chain vulnerabilities to demonstrate real-world impact, and provide developer-friendly remediation guidance. My reports aren't just a list of problems—they're a roadmap to genuine security improvement.

"I don't just run scanners — I think like an attacker to find what others miss."

Beyond my technical expertise, I believe in continuous learning. I hold multiple certifications, contribute to open-source security projects, and stay updated on emerging threats and methodologies. I'm also passionate about sharing knowledge—through writeups, CTF solutions, and mentoring aspiring security professionals.

When I'm not testing applications, you'll find me exploring new attack vectors, contributing to the security community, or diving into classical Islamic studies (Dars e Nizami). I'm multilingual—fluent in Urdu, Punjabi, and English—which helps me work effectively with diverse international clients.