I'm a OSCP+ certified IT Security Analyst based in Delhi, India, with over 3 years of enterprise-scale penetration testing experience across banking, fintech, and healthcare sectors.
I've conducted 400+ VAPT engagements covering more than 5,000 assets — identifying critical vulnerabilities that would otherwise remain invisible. My work spans internal network pentests, external penetration testing, Active Directory security assessments, PCI DSS compliance cycles, and CERT-IN empanelled audits.
Most recently, I completed a 9-month onsite core banking infrastructure security audit at a leading Indian public sector bank — 1,500+ IPs, 7 mission-critical applications, full DC and DR environment assessment under the CERT-IN framework. That engagement alone covered a ₹7 crore+ banking infrastructure.
I started this website for one reason: to give back. Everything I know, I learned from free resources, late nights, and failing over and over. If my notes or blog posts help even one person pass OSCP or land their first security job, that's enough for me.
I've sat inside banking data centres, tested systems that millions of people's money depends on, and written reports that landed on the desks of CISOs and GMs. None of that makes me unreachable. It makes me someone who understands what's at stake — and wants to make sure the next generation of security professionals does too.
9-month CERT-IN empanelled infrastructure audit. 1,500+ IPs, 7 critical banking applications, DC & DR validation, Active Directory security review, lateral movement analysis.
3,494 structured security testing activities. 274 Critical, 365 High vulnerabilities identified. 6 client appreciation letters. 100% compliance cycle adherence.
Passed the industry's hardest hands-on penetration testing certification. 24-hour live exam, full AD chain + standalone machines exploitation and documentation.
Enterprise VAPT across banking, fintech, and healthcare. PCI DSS ASV scanning, CERT-IN audits, Active Directory exploitation, vulnerability lifecycle management.
Structured threat research, exploit validation, OWASP Top 10 testing, CTF-based simulations. Where the journey began.
If my content helped you in your journey, a coffee keeps me motivated to write more.
☕ Buy me a coffee