Security Engineer@ Tenable
I uncover vulnerabilities, dissect complex systems, and contribute to a safer digital ecosystem through rigorous research and disclosure.
// Bug Hunter•Web Security Researcher

Selected Work
View ArchiveCriticalCVE-2026-20896
Broken Authentication in Gitea
Latest disclosed vulnerability affecting Gitea. Read the full advisory and technical breakdown.
Open Source Tool
WebSec0
SSL/TLS + Headers scanner.
Research Blog
Bugbounty agent benchmark
I built a black box benchmark for bug bounty agents in a week and ran fourteen hundred cells across five models, seven harnesses and one browser. Here is what it measured, what it could not measure, and why the labs are the hard part.