I work at the intersection of cyber threat intelligence, offensive security, application security and security product development.

My focus is not only finding vulnerabilities, but also building systems that help organizations detect, understand and act on external cyber risks before they become incidents.

I build security-focused tools, automate intelligence workflows and develop products around real-world attacker behavior, exposed assets, leaked credentials and fraud signals.

CTI                  ████████████
Offensive Security   ███████████░
Malware Analysis     ██████████░░
AppSec               ██████████░░
ASM                  ███████████░
Security Products    ████████████
Automation           ███████████░

Discovered and reported a Cross-Site Scripting vulnerability affecting Todoist v8896.

The issue was related to SVG file upload handling in /api/v1/uploads. Uploaded SVG files were not properly sanitized, allowing embedded JavaScript to execute when the attachment was opened from a task or comment.

References

• CVE-2025-63317 — NVD
• Todoistv8896 Advisory

Threat Proxy is a cyber threat intelligence platform designed to make external threats visible, track leaked data, monitor exposed assets and help organizations take early action.

Threat Proxy
├─ Dark Web Intelligence
├─ Credential Exposure Tracking
├─ Attack Surface Visibility
├─ Malware IOC Monitoring
├─ Phishing & Brand Abuse Tracking
└─ Fraud Intelligence

• Dark web and hacker forum monitoring
• Data leak and credential exposure tracking
• Corporate domain, email and username monitoring
• Exposed service and critical port monitoring
• Malware IOC, malicious URL and blacklist IP tracking
• Phishing and brand abuse monitoring
• Fraud intelligence and early warning signals

See the invisible. Act early.