Sourabhkumar M.

PROFESSIONAL SUMMARY Experienced Penetration Tester and Security Researcher with hands-on expertise across Web2, Web3, mobile (iOS & Android), API, and enterprise environments. CVE-credited by Apple (CVE-2025-31256) for discovering a critical macOS privacy vulnerability, demonstrating strong capabilities in identifying high-impact security flaws in real-world systems. Proficient in manual and automated security testing, uncovering complex issues such as authentication and authorization flaws, race conditions, business logic vulnerabilities, and insecure integrations. Skilled in developing reproducible proof-of-concepts, automation scripts, and clear vulnerability reports that enable engineering teams to remediate risks effectively. Adept at working independently in freelance and bug bounty settings while maintaining a strong ethical approach to offensive security and responsible disclosure.