About

I am a security researcher with a strong interest in how systems break and how to make them more resilient. My research spans web application security, API security and the security of AI powered applications, and I build open source tools and Telegram bots to support that work.

I approach security from the fundamentals: how the web and networks actually work, where authentication and authorization tend to go wrong, and how to explain risk clearly to the people responsible for fixing it. Alongside my studies I practice responsible disclosure and have reported issues to universities, institutions and companies.

Areas of focus

• 01

  Web Application Security

  Authentication, session handling, access control and the common vulnerability classes behind real world breaches.

• 02

  API Security

  Authorization logic, input validation and data exposure risks in modern REST services.

• 03

  AI and LLM Security

  Prompt injection, data leakage and defensive design for applications built on language models.

• 04

  Network and Systems

  Networking fundamentals, Linux administration and secure configuration of deployed services.

• 05

  Tools and Automation

  Building practical tools and Telegram bots that automate repetitive security and everyday tasks.

• 06

  Responsible Disclosure

  Documenting issues clearly and working with the teams who own them until they are resolved.

Skills

• Security

  Threat modeling, Vulnerability assessment, Penetration testing methodology, OWASP standards, Risk communication

• Programming

  Python, JavaScript, Go, Bash, SQL

• Web and Cloud

  HTML and CSS, Node.js, React and Vue, REST API design, Serverless platforms

• Systems

  Linux, Docker, TCP/IP, DNS and HTTP, Git and CI/CD, Web servers and reverse proxies

Selected work

See all projects

Disclosures and certifications

I have responsibly reported security issues to universities and organizations, each acknowledged with a verifiable certificate, and earned certifications in AI penetration testing and ethical hacking. Read the records.

Education

• 2024 to present

  BSc in Digital Technology Innovation

  Kasem Bundit University, Bangkok, Thailand

  Studies across software development, networking and emerging technology, alongside independent security research.

• 2019 to 2024

  AGTI in Mechanical Engineering

  GTI Yenangyaung, Magway, Myanmar

  Foundations in engineering, mathematics and structured problem solving.

Contact

For security reports, collaboration or questions, the fastest way to reach me is Telegram. You can also find my work on GitHub, my research profile on ORCID, and older writing at devtint.github.io.