I'm Aakash Tayal, a Security Analyst based in Pune with 3+ years of dedicated experience in penetration testing, threat modeling, and security risk assessments across web applications, REST/ABHA APIs, and Android platforms. I hold the CEH (Practical) certification and currently work as a Security Analyst at a cybersecurity services firm, where I focus on business logic exploitation, authentication vulnerabilities, IDOR, and privilege escalation across client Engagements. Outside of client work, I actively research and report vulnerabilities through public bug bounty programs. I've been credited with a publicly disclosed CVE, earned Hall of Fame recognition from organizations including Oracle, Foursquare, Airship, Process Street, and Services Australia, and received appreciation letters from bodies like the Dutch Tax and Customs Administration, the Government of India, University of Cambridge, Panasonic, and Lenovo for responsibly reported findings. I help two kinds of people: 1. Aspiring offensive security professionals who want a practical, no-fluff path into pentesting and bug bounty hunting setting up Burp Suite, building a Kali Linux + VMware lab, understanding OWASP Web/API/Mobile (MASTG) methodology, and learning to actually find and report vulnerabilities instead of just watching tutorials. 2. Businesses and founders who want an independent, methodology-driven assessment of whether their web app, API, or Android app is actually secure before an attacker (or a bug bounty hunter) finds out for them. Book a call if you want to: get started in offensive security, build your first home lab, prep for your first bug bounty submission, understand OWASP testing methodology, or get a professional security assessment of your product.