Harshit S.

You cannot afford a data breach. Having secured industry giants like Dell, Western Union, DigitalOcean, and the Indian Government (NCIIPC), I bring enterprise-grade security expertise to your project. I am an OSCP and CREST certified Penetration Tester with 6+ years of experience. I don't just run automated scanners that miss critical flaws, I use a systematic, manual approach (OWASP, NIST) to think like a hacker and find vulnerabilities before malicious actors do. 🛡️ Why Clients Trust Me: - Elite Certifications: OSCP, CREST (CPSA), ISO 27001 Lead Auditor, and (ISC)². - Manual Intelligence: I go beyond automated tools. I perform deep logic-based testing to find complex vulnerabilities in Business Logic, API endpoints, and Smart Contracts. - Clear Reporting: You receive a detailed report with Proof-of-Concept (PoC) screen captures, CVSS v4.0 risk scoring, and actionable remediation steps, not just technical jargon. 🛠️ My Security Services: 1. Web & Mobile Application Security (VAPT) - Comprehensive testing for Web Apps, APIs, and Thick Clients. - iOS & Android Security (Static & Dynamic Analysis). 2. Source Code Review & DevSecOps integration. 3. Cloud & Infrastructure Security - AWS, Azure, GCP, and DigitalOcean configuration audits. - Network VAPT, Container Security (Docker/K8s), and Firewall/Router hardening. - Active Directory & Windows/Linux Server hardening. 4. Emerging Tech Security (AI & Blockchain) - AI/LLM Security: Testing GenAI and Agentic AI models for prompt injection and jailbreaks. - Blockchain: Smart Contract auditing and IoT/Hardware security. ✅ My 4-Step Engagement Process: - Reconnaissance & Scanning: Using BurpSuite Pro, Nessus, custom scripts and other standard tools. - Manual Exploitation: Verifying false positives and exploiting complex flaws. - Reporting: Delivering a professional report with a management summary and technical fix guide. - FREE Retest: I will verify your fixes at no extra cost to ensure the holes are truly plugged. 🏆 Notable Achievements: - Acknowledged by NCIIPC (Government of India) for critical security submissions. - Secured platforms for: Fitbit, Skyscanner, UnderArmour, Mailgun, and Bharti Airtel. 🛠️ Technical Skills: - Vulnerability Assessment & Penetration Testing - Web Application VAPT - API VAPT - AI/Gen AI/Agentic AI Security Testing - Android & iOS Mobile ApplicationVAPT - Network VAPT - AWS/ Azure/ GCP/ DigitalOcean Cloud Security Audit and Penetration Testing - Microsoft Office 365 Security Audit or Configuration Review - Thick Client or Desktop Application VAPT - Active Directory Security - DevSecOps - Container Security - VoIP Penetration Testing/ Security Testing - IoT/Hardware Security Testing - Smart Contract Security Audit - Threat Modeling - Threat Intelligence - Open Source Intelligence - Security Configuration Review - Firewall, Switches, Router, Operating Systems and Servers Contact me to discuss your scope. Let’s secure your assets today.