About Me

I’m Suvendu Dash, a security researcher based in India. Most of my time goes into finding security vulnerabilities in web applications and reporting them responsibly through bug bounty programs, on platforms like HackerOne and Bugcrowd and with companies such as Meta and OpenAI.

This blog is where I share what I learn along the way.

• Bug bounty and web security: how I approach recon, hunt for vulnerabilities and write reports that get triaged.
• Offensive security and red teaming: how attackers think, and how defenders can use that.
• Cybersecurity careers: roadmaps, certifications and interview preparation for people getting into the field.
• AI and security: testing LLM applications, and using AI agents to automate security work.
• Staying safe online: real scams explained, and practical ways to protect yourself.

Now and then I also write about travel and personal growth.

Security can feel closed off when you’re starting out. I write the guides I wish I’d had: practical, honest and based on real experience, including the duplicates, rejections and slow weeks that come with bug hunting.

When I’m not hunting bugs, you’ll find me riding my bike, reading, taking photos, travelling to places like Vrindavan, or trying out new recipes.

Have a question about security, a career in the field, or an idea for a collaboration? Reach out through the contact page or follow me on Instagram. You can also subscribe to the newsletter to get new posts in your inbox.