KonSecurity is the public home for my cybersecurity research, technical writing and security work. I focus on understanding how applications behave, where trust boundaries fail, and how vulnerabilities can be validated and communicated responsibly.
KonSecurity combines security knowledge, offensive security research and defensive thinking to identify vulnerabilities, understand real-world attack paths and help organizations strengthen their security.
I work independently on application security and vulnerability research, with a hands-on approach that combines manual testing, focused tooling and technical investigation.
My interests span web applications, APIs, authentication and authorization, client-side security, Android applications, cloud-facing attack surfaces and security controls such as CSP.
I also spend time on CTF challenges and controlled security experiments because they are a useful way to test ideas, learn new techniques and keep research methodology practical.
My vulnerability research and responsible disclosure work has included participation across established security research platforms and communities.
Independent security research and penetration testing through the platform.
Vulnerability research and responsible disclosure across participating programs.
Security testing and vulnerability research across participating programs.
Vulnerability discovery and disclosure across participating security programs.
Platform participation does not imply endorsement, employment, sponsorship or affiliation beyond the research activity described.
Application logic, access control, injection, client-side behavior, authentication and API trust boundaries.
Android application behavior, local storage, networking, backend APIs and application security controls.
Exploring vulnerability classes, defensive controls, attack paths and practical testing methodologies.
For assessments, research collaboration or security questions, send the scope and objective.