I help enterprises find the holes before someone else does. 5+ years running penetration tests, vulnerability assessments, and DevSecOps engagements — currently researching threat mitigation at IIT Bhilai.
I'm an independent security consultant with 5+ years hands-on experience securing enterprises — 132+ clients and 140+ projects across penetration testing, application security, DevSecOps and GRC. I run engagements end-to-end, from scoping through executive readout.
On the academic side I'm a PhD scholar at IIT Bhilai, researching threat mitigation in cloud-native environments. The research informs the consulting and vice-versa — clients get the rigour of academic methodology with the velocity of an indie operator.
Independent means flexibility, direct senior attention, and pricing that actually makes sense for your budget — no agency overhead.
Cyber Security Consultant and Ph.D. researcher with 5+ years spanning technical implementation, compliance, and international client engagement. Hands-on with Kali Linux, Nessus, Burp Suite, Checkmarx, OWASP ZAP, HCL AppScan, BlackDuck, Acunetix, and Sumo Logic. Experienced in GRC across SOC 1 / SOC 2 / ISO 27001 / HIPAA, and in supporting business development through international RFPs and client acquisition.
End-to-end penetration testing against web applications, APIs, networks and cloud infrastructure. 15+ successful engagements with 200+ vulnerabilities identified and remediated.
Automated + manual VAPT using enterprise tooling, with strategic integration that cut false positives by 30% on past engagements.
Build security into your delivery pipeline. SAST, DAST, SCA, and CI/CD security wired into how your team already ships.
Audit-ready in months, not years. Past clients saw ~20% improvement in audit scores through targeted control implementation and documentation.
Fixed scope, fixed timeline, fixed deliverables. Best for one-shot assessments and audit prep.
Hourly consulting for advisory, code review, threat modeling sessions, or developer training.
Continuous support: monthly assessments, on-call advisory, security ownership for teams without a CISO.