I specialize in mobile (Android/iOS) and web application security, combining deep-dive pentesting, reverse engineering, and runtime instrumentation to uncover the critical flaws automated scanners miss. My work spans Android and iOS assessments using Frida, JADX, apktool/smali, Burp Suite, mitmproxy, Python crypto tooling, and custom debugging workflows to analyze real-world risks with precision. Delivering end-to-end VAPT assessments and red-team-style scenarios, crafting detailed PoCs and custom Bypass scripts, and breaking down complex findings into clear, actionable remediation steps that development teams can immediately apply. This includes analyzing and validating cryptographic implementations, bypassing in-app security controls, and navigating obfuscated codebases to understand how applications behave under the hood. I enjoy teaching, documenting, and sharing these insights - helping teams strengthen their secure development practices and build more resilient applications in a constantly evolving threat landscape. My goal is straightforward: identify meaningful vulnerabilities and empower organizations to fix them effectively and sustainably.