Naga Sai Kiran T.
Security Analyst at Digit Insurance with 3+ years of hands-on experience in vulnerability assessment and penetration testing. My day-to-day involves tearing apart web applications, REST APIs, and Android apps to uncover security flaws — from injection vulnerabilities to complex business logic issues.
I write about what I learn: CVE deep dives, CTF writeups, privilege escalation techniques, and curated security resources.
Security expertise
Web Application Security
Full-scope VAPT of web applications. Injection flaws, authentication bypasses, access control issues, and business logic vulnerabilities.
API Security Testing
REST and GraphQL API penetration testing. BOLA, BFLA, mass assignment, rate limiting, and auth flow analysis.
Mobile App Security
Android application security assessments. Static and dynamic analysis, reverse engineering, and SSL pinning bypass.
Source Code Review
Manual and SAST-assisted code review to identify vulnerabilities at the source level.
CTF & Research
Active CTF participant and security researcher. CVE hunting, HackTheBox challenge creation, and vulnerability research.
Security Architecture
Threat modeling, secure design review, and security recommendations for development teams.
Experience
Security Analyst
VAPT of web applications, APIs, and Android apps. Source code reviews, SAST integration, and business logic testing across the insurance platform.
Security Research & CTF
CVE hunting, HackTheBox challenge creation, CTF competitions, and publishing security research.