Find the weakness.Understand the risk.Fix it properly.

I'm an ethical hacker and penetration tester. I test your website, app, or API the way an attacker would, then hand you clear, prioritized fixes your team can act on.

Book a security assessmentSee what I test

Sample finding, showing the format of every report I deliver.

5+ years in ethical hacking and application security

1,500+ students trained in cybersecurity

Bug bounty hunter on HackerOne

Developer background, so I understand how it was built

What I test and secure

Every engagement ends with a plain-language report: what I found, how bad it is, and how to fix it.

Web application testing

Login, sessions, access control, injection, and business-logic flaws in your site or web app.

API security testing

Authorization gaps, data exposure, and abuse paths in the APIs behind your web and mobile apps.

Android app testing

Insecure storage, weak communication, and backend issues reachable from your mobile app.

Vulnerability assessment

A structured sweep of your digital assets, with each issue rated by real business impact.

OSINT and digital intelligence

What an attacker can learn about your business, staff, and systems from public sources.

Security consulting

Hardening advice and remediation support, so fixes hold up after the report is delivered.

How an assessment works

  1. Scope

    We agree what's in scope, what's off limits, and what matters most to your business.

  2. Map

    I map your attack surface: pages, endpoints, logins, and the tech behind them.

  3. Validate

    I confirm each weakness is real and safe to prove, so you get no false alarms.

  4. Report and fix

    You get ranked findings with fix steps, and I'm available while your team applies them.

WordPress site hacked or worried it could be?

I remove malware, close the hole it came through, and harden the site so it doesn't happen again. I can also audit plugins, themes, users, and server settings before anything goes wrong.

Get a WordPress security check

I also teach security

I've trained 1,500+ students in information security and cybersecurity, focused on practical skills for real security work. I write and test with the same mindset I teach: understand how applications are built, then how they break.

Security notes from the field

All posts

Practical write-ups on the weaknesses I find and how to fix them.

API security

Why changing an ID in the URL still exposes customer data

How broken access control slips into APIs, and the server-side check that stops it.

Read post WordPress security

Five signs your WordPress site is already compromised

What to look for in plugins, users, and files before customers or Google notice.

Read post Bug bounty

How I approach a new target, from first scan to validated finding

The steps I follow to map an attack surface and prove an issue is real.

Read post

Want to know where your gaps are?

If you're responsible for a website, application, online business, or digital infrastructure, send me a short note about what you run. I'll reply with how I'd scope the assessment.

Email Rajib

Start typing to see posts you are looking for.