FINDING-001 critical Jun 2023 - Present · Kuala Lumpur, MY
As technical co-founder, I built and managed the platform's entire stack from initial code to production: the core Attack Surface Management (ASM), brand protection, and threat-intel engines, the DevSecOps pipelines, AI/RAG integrations, and the frontend dashboards that turn raw security logs into clear, visual data.
- Threat Intel: wrote data pipelines and parsers that collected and processed 2B+ stealer leaks.
- ASM Scaling: built a distributed scanning engine using hundreds of concurrent instances to map large infrastructures (7,000+ assets) in under 3 hours.
- Brand Protection: created a monitoring system that analyzed 100,000+ network mentions, leading to 1,000+ successful threat takedowns.
- Pentesting: ran enterprise penetration tests across web, API, cloud, and infrastructure, and delivered technical remediation roadmaps.
- AI / RAG: integrated AI/RAG models with third-party APIs to automate enrichment and triage of security findings.
FINDING-002 high May 2026 - Present · Kuala Lumpur, MY
Founded Fraudox, a takedown service that removes phishing sites, impersonation accounts, and other fraudulent content across 50+ platforms, with a typical turnaround of under 48 hours.
- Takedowns: run rapid content takedown operations with a typical turnaround of under 48 hours.
- Billing: implemented a 100% success-based model, so clients only pay when content is successfully removed.
- Intake: manage a 24/7 request intake system handling phishing sites and impersonation accounts across 50+ platforms.
FINDING-003 medium Jan 2022 - Aug 2023 · Dubai, UAE
- Performed penetration testing and security audits for DeepStrike and its clients.
- Managed AWS and Cloudflare security services.
- Conducted code reviews, collaborating with developers to remediate vulnerabilities.
- Integrated security best practices into the SDLC.
- Wrote technical contributions for DeepStrike's blog.
FINDING-004 info May 2022 - Present · Remote
Bug Bounty Hunter @ Independent
- Participated in many bug bounty programs, successfully finding and reporting numerous vulnerabilities.
FINDING-005 info Sep 2021 - Present · Worldwide
CTF Player @ Competitive Security
- Consistently achieved top-percentile rankings across web exploitation, OSINT, and mobile hacking.