Security Engineer@ Tenable
I uncover vulnerabilities, dissect complex systems, and contribute to a safer digital ecosystem through rigorous research and disclosure.
// Bug Hunter•Web Security Researcher

Selected Work
View ArchiveCriticalCVE-2026-20896
Broken Authentication in Gitea
Latest disclosed vulnerability affecting Gitea. Read the full advisory and technical breakdown.
Open Source Tool
WebSec0
SSL/TLS + Headers scanner.
Research Blog
Bugbounty agent benchmark
I built a black box benchmark for bug bounty agents in a week and ran a thousand cells across five models, six harnesses and one browser. Here is what it measured, what it could not measure, and why the labs are the hard part.